The Role of the Audit Committee in Financial Reporting and What Investors Should Check

Every US public company has to have an audit committee, and almost nobody reads the part of the proxy statement that describes it. Investors skim past the governance pages on the way to the compensation tables, which is a shame, because if you want to know whether the numbers in a 10-K deserve your trust, the audit committee is the group of directors whose actual job is to make sure they do.

My years at American Express taught me how much machinery sits behind a single reported number. The audit committee is the last checkpoint that machinery passes through before the numbers reach you. Strong committees catch problems early and quietly, while weak ones let them compound until they surface as restatements. The public record tells you a lot about which kind you're dealing with, and all of it is free.

What the Audit Committee Actually Does

The audit committee is a subcommittee of the board with four core jobs: overseeing the financial reporting process, monitoring internal controls, supervising the internal audit function, and managing the relationship with the external auditor. In practice, that means the committee reviews the quarterly and annual statements before they're filed with the SEC, discusses significant accounting policies and estimates with management and the auditor, evaluates whether the auditor is independent and competent, and owns the whistleblower process for accounting complaints.

The ground rules got strict after Sarbanes-Oxley passed in 2002. Exchange listing standards now require every member of the committee to be independent, meaning no material relationship with the company beyond the board seat itself. Companies also have to disclose whether the committee includes at least one audit committee financial expert as the SEC defines the term, someone with genuine financial reporting experience such as a former CFO, controller, or audit partner, and explain why if it doesn't. Nearly every board makes sure it can point to one, so the interesting question is who that person is and whether the rest of the committee adds anything.

Why Committee Quality Matters

On paper, every audit committee looks identical. The difference shows up in behavior. A committee of competent, engaged directors asking hard questions about revenue recognition or reserve assumptions makes management think twice before pushing an aggressive accounting judgment. A passive committee that convenes a few times a year to bless whatever it's handed provides no friction at all.

There's a large academic literature connecting audit committee independence and financial expertise to fewer restatements and stronger internal controls, but you don't need the citations to believe the mechanism. Management always has some incentive to present the most favorable picture the rules allow. The audit committee exists to test that picture before it goes out the door. When the test is weak, aggressive reporting slips through, and issues that should have been caught internally surface later as material weaknesses and restatements.

What to Check in the Proxy Statement

The proxy statement, filed as a DEF 14A on EDGAR, gives you most of what you need. Five things I look at:

Financial expertise. Companies name their designated financial experts, so find out who qualifies and why. You want at least one member who has actually run a reporting function. A committee made up entirely of former CEOs and lawyers can be diligent, but it's less likely to press management on the mechanics of revenue recognition or the assumptions buried in a reserve estimate.

Industry experience. Accounting risk is industry-specific. A pharmaceutical committee benefits from someone who understands trial and rebate accounting, and a software committee benefits from someone who has lived through subscription revenue recognition. Generic financial literacy tends to miss the category-specific games.

Meeting frequency. The proxy discloses how many times the committee met during the year. There's no magic number, but the bare quarterly minimum suggests a committee that reviews what it's handed rather than one that digs. Compare against close peers, and watch for changes; a sudden jump in meetings from one year to the next sometimes means an issue was being worked in private.

Bandwidth. Check how many other public boards each member sits on. Audit committee work is the most time-consuming assignment on a board, and a director spread across several boards, or chairing multiple audit committees at once, may not have the hours. Proxy advisors flag overboarded directors for exactly this reason.

Tenure mix. Long-serving members carry institutional knowledge of the company's accounting quirks, which is genuinely useful. But a committee where everyone has served for well over a decade alongside the same CFO starts to look like a set of relationships, and relationships soften skepticism. A blend of veterans and newer members is the healthier pattern.

Read the Committee's Report, Then Check the Auditor's

Every proxy includes a short audit committee report, and most investors skip it because most of it is boilerplate. The committee confirms that it reviewed the financial statements, discussed them with management and the external auditor, and discussed the auditor's independence. Those confirmations matter mainly in the negative, since their absence would be a serious red flag. Some companies go further and describe the specific estimates and judgment areas the committee spent time on. When that disclosure exists, treat it as a map of where management's numbers are softest.

Then cross-reference the auditor's side of the story. For most US public companies, the audit opinion in the 10-K now includes critical audit matters, the areas that involved the toughest judgment calls. If the auditor flags goodwill impairment assumptions as a critical audit matter and nothing from the committee suggests any attention there, that gap tells you something about engagement.

Internal Controls, Material Weaknesses, and the Whistleblower Channel

The committee oversees the internal control environment, so when a company discloses a material weakness (check Item 9A of the 10-K), the committee's response is the tell. Did meeting frequency rise? Did the board add relevant expertise? Is there a remediation plan with real milestones? Committees that treat a material weakness as an emergency tend to get it fixed much faster. A company reporting the same weakness year after year has a committee that isn't holding management accountable, and I'd treat every number it publishes with extra skepticism until that changes.

Sarbanes-Oxley also requires the committee to maintain procedures for confidential, anonymous complaints about accounting and auditing matters. Companies rarely volunteer what comes through that channel, so when a proxy or an 8-K does reference an internal investigation into accounting concerns, read it slowly. Someone inside the company thought the problem was serious enough to push past management.

The External Auditor Relationship

Under Sarbanes-Oxley, the audit committee hires, pays, and oversees the external auditor. Management doesn't control that engagement, at least on paper, and the whole idea of auditor independence rests on that separation. The proxy gives you a few ways to test how healthy it is in practice.

Auditor tenure. Proxies generally disclose the year the audit firm was first engaged. The lead audit partner has to rotate off every five years under Sarbanes-Oxley, but the firm itself can stay indefinitely, and some engagements have run for decades. Long tenure brings deep knowledge of the business along with familiarity, so on its own it proves little. It should, however, sharpen your attention on the fee and disagreement signals below.

The fee table. The section usually titled Principal Accountant Fees and Services breaks out audit fees from tax and other non-audit fees. Sarbanes-Oxley bans auditors from selling certain services to their audit clients, bookkeeping and valuation work among them, but plenty of consulting remains permissible. When non-audit fees rival or exceed audit fees, ask how eager the firm will be to fight management over an accounting treatment that could cost it the whole relationship.

Pre-approval policy. The committee has to pre-approve everything the auditor is paid to do. Some committees approve each engagement individually, while others grant blanket approval up to a dollar threshold, which is thinner oversight. The policy is usually described near the fee table and takes a minute to read.

Auditor changes. When a company switches auditors, the 8-K filing (Item 4.01) must state whether there were disagreements with the departing firm. A change on the heels of a disagreement over accounting treatment is one of the clearest red flags in financial reporting. Even a clean-looking change deserves two questions: why now, and who initiated it?

Putting It Together

None of these signals means much on its own; the pattern is what you're reading for. Say a mid-cap software company's proxy shows a committee that met four times last year, a designated financial expert whose background is entirely corporate law, non-audit fees running well above audit fees, and the same audit firm in place since the 1990s. Each item is defensible by itself. Together they describe an oversight function that exists mostly on paper, and I'd discount the precision of that company's judgment-heavy numbers, revenue timing and capitalized costs especially.

The same logic builds confidence in the other direction. A committee with a former audit partner and a genuine industry operator on it, meeting well above the minimum, with modest non-audit fees and a recently re-tendered audit, tells you qualified people are checking. No governance setup guarantees clean numbers, but that's the most you can reasonably ask from the outside.

Here's the fifteen-minute version:

1. Open the latest DEF 14A and find the audit committee section. Note the members, the designated financial expert, and how many times the committee met.
2. Check each member's other board seats and whether anyone has hands-on reporting experience in this industry.
3. Read the audit committee report, then compare it with the critical audit matters in the 10-K's audit opinion.
4. Scan the fee table for the audit versus non-audit split, and skim the pre-approval policy while you're there.
5. Search recent 8-K filings for auditor changes and Item 9A for material weaknesses, and look at how the committee responded.

Few investors do any of this, which is exactly why it's worth your time. We bake a version of this governance check into FirmAdapt's company diagnostics alongside the financial analysis, since strong numbers from a weakly governed company deserve more skepticism than the same numbers from a well-overseen one. Read the proxy before you trust the 10-K, and start with the pages everyone else skips.