Responsibility and Accountability for Persons Contributing to a Registered Audit Firm’s Violations of Law or Professional Standards, Proposed Amendments to PCAOB Rule 3502
Remarks as prepared for delivery
The proposal before us today may seem very technical, but it is important. It would strengthen the Board’s auditor oversight program and undergird the implementation of the audit standards that the Board is currently modernizing.1
Under Chair Williams, this Board has focused on updating the legacy auditing standards it inherited and that were written decades ago by the accounting profession. The Board is doing so to advance its mission of protecting investors and furthering the public interest in informative, accurate, and independent audit reports. Much of that work focuses on the auditors’ responsibilities and the obligation of auditors to exercise due professional care.2
Today, consistent with that focus, the Board is considering whether auditors who contributed directly and substantially to the violations of an audit firm because they failed to exercise reasonable care and competence can be held accountable.
As today’s staff recommendation explains, the Board has identified a gap in its oversight of auditors based on almost two decades of experience. At present, the Board, under existing rules, cannot hold some auditors accountable for directly and substantially contributing to a registered audit firm’s violation of the Board’s standards and rules. The gap arises from a rule written by the Board about twenty years ago. This rule only permits the PCAOB to bring an action against an auditor when that person acted recklessly or intentionally when participating in or contributing to an audit firm’s violations.
As a practical matter, of course, only individuals can take actions that violate laws, rules, and standards. The PCAOB, however, lacks the ability to ensure that all individual auditors face the consequences. The PCAOB currently cannot bring an action against negligent auditors whose direct and substantial contributions furthered an audit firm’s violations. This creates an obvious gap in the Board’s ability to protect investors and public markets, as Table 1 in the economic analysis suggests. Today’s proposal would close this oversight gap, thus emphasizing the obligations under the auditing standards that auditors act with reasonable care and competence.
The proposed rule would also align the PCAOB’s authority so that no individual who contributes to a firm’s violations is beyond reach. It will no longer matter if the person is associated with the audit firm committing the violation or is associated with another registered firm that helped with the audit. In today’s complex business environment, a number of firms may participate in the audit of a single public company, and the Board’s rules should apply uniformly to each firm’s personnel.
I support the staff’s proposal to amend Rule 3502, and I look forward to receiving feedback from investors and other stakeholders.
I want to thank the staff from the Office of the General Counsel for their work and recommendation. I would also like to thank the Office of Economic and Risk Analysis, the Division of Enforcement and Investigations, and others who contributed to this proposal.
1 “The PCAOB must continue to anticipate and respond to developments in the audit profession. As a result, we are researching emerging trends and modernizing our standards to drive changes in auditing practices and enhance investor protection.” See PCAOB Strategic Plan, 2022-2026, Nov 18, 2022.
2 In June 2022, the Board adopted amendments regarding audits involving multiple accounting firms specifying that each auditor involved in the audit is responsible for performing their work with due professional care. See PCAOB Release No. 2022-002, Planning and Supervision of Audits Involving Other Auditors and Dividing Responsibility for the Audit with Another Accounting Firm, Jun 21, 2022
In November 2022, the Board proposed a new quality control standard that would replace the current interim quality standards, which were written and adopted over 25 years ago, which if adopted would, among other things, require audit firms to establish a “quality objective related to due professional care.” See PCAOB Release No. 2022-006, A Firm’s System of Quality Control, Nov 18, 2022.
In December 2022, the Board voted to issue for public comment a proposal for a new standard, AS 2310, The Auditor’s Use of Confirmation, including provisions that “reinforce the auditor’s obligation to exercise due professional care.” See PCAOB Release No. 2022-009 December 20, 2022, Proposed Auditing Standard – The Auditor’s Use of Confirmation, and Other Proposed Amendments to PCAOB Standards, Dec 20, 2022.
In March 2023, the Board proposed a new audit standard that would reorganize and consolidate the general responsibilities of the auditor, including due professional care. The proposed new auditing standard addresses the general responsibilities of the auditor, such as due professional care and professional skepticism, when conducting an audit in accordance with the standards of the PCAOB. See PCAOB Rel. No. 2023-001, proposed AS 1000, General Responsibilities of the Auditor in Conducting an Audit, (Mar. 28, 2023.
In June 2023, the Board issued for public comment a proposal to replace AS 2405, Illegal Acts by Clients, in its entirety with AS 2405, A Company’s Noncompliance with Laws and Regulations, together with conforming amendments to PCAOB auditing standards. See PCAOB Release No. 2023-003, Proposing Release: Amendments to PCAOB Auditing Standards related to a Company’s Noncompliance with Laws and Regulations And Other Related Amendments, Jun 6, 2023.