An ESOP needs an annual financial statement audit by an independent qualified public accountant (IQPA) once it has 100 or more participants with account balances at the start of the plan year. That is the core of the ESOP audit requirements: a large-plan Form 5500 filing with Schedule H attached, backed by an IQPA opinion covering the plan’s financial statements, the annual valuation of employer stock, and the accuracy of individual participant accounts.1Office of the Law Revision Counsel. 29 U.S. Code 1023 – Annual Reports Because an ESOP invests primarily in the sponsoring employer’s own shares, the audit reaches into risks that don’t exist in a standard 401(k), and the consequences of getting it wrong run from excise taxes to plan disqualification.
Who Must Get an Audit
The Department of Labor treats a plan as “large” when 100 or more participants have account balances at the beginning of the plan year.2eCFR. 29 CFR 2520.103-1 – Contents of the Annual Report Large plans file Form 5500 with Schedule H and must attach the IQPA audit report.3U.S. Department of Labor. Schedule H (Form 5500) Financial Information Plans below the threshold file a simplified Form 5500 with Schedule I and no audit, though they still have to meet the small-plan asset and bonding conditions.
How you count participants changed for plan years beginning in 2023. Under SECURE 2.0, the count now includes only participants who actually have an account balance. Eligible employees who have never received a stock allocation no longer count. That shift pulled some borderline plans below 100 and ended their audit requirement.
The 80-to-120 Participant Rule
Plans near the line get a break. If the participant count at the start of the plan year falls between 80 and 120, and the plan filed a Form 5500 last year, it can continue filing in the same category it used before. A plan that filed as small last year with 95 participants can keep filing as small even if the count drifts to 110. Cross 120, though, and the plan files as large and gets audited no matter what it did the year before. Once a plan files as large, it stays large until the count drops below 100.
Picking an Independent Qualified Public Accountant
Hiring the IQPA is itself a fiduciary act. The plan administrator or committee has to document how and why a particular firm was chosen and show the decision was made prudently and in participants’ interest.
Independence has specific meaning here. The accountant cannot hold a direct financial interest, or a material indirect financial interest, in the plan or sponsor during the engagement, the period covered by the financial statements, or at the date of the opinion.4eCFR. 29 CFR 2509.2022-01 – Interpretive Bulletin Relating to Guidance on Independence of Accountant Retained by Employee Benefit Plans The auditor also cannot serve as a director, officer, or employee of the sponsor and cannot maintain the plan’s financial records.
Independence alone isn’t enough. ESOP audits involve employer stock valuations, leveraged loan structures, repurchase obligations, and prohibited transaction exemptions that turn on specific conditions. A firm that routinely handles 401(k) plans but has never worked with an ESOP can miss compliance issues that matter. The AICPA’s Employee Benefit Plan Audit Quality Center requires member firms to maintain internal inspection procedures for ERISA audits and have their benefit plan engagements peer reviewed by other member firms.5AICPA & CIMA. EBPAQC Mission and Requirements Individual auditors who sign ERISA opinions must also complete at least eight hours of benefit-plan-specific continuing education every three years. Hiring from an EBPAQC member firm with real ESOP experience is one of the simplest ways to lower audit risk.
What the Auditor Actually Tests
Four areas take the bulk of audit time on a typical ESOP engagement.
The Annual Stock Valuation
This is the single highest-risk area and the one that most distinguishes an ESOP audit. Because most ESOP shares aren’t publicly traded, their value is set each year by an independent third-party appraiser. ERISA requires that any purchase or sale of employer securities by the plan be for “adequate consideration,” meaning fair market value determined in good faith by the trustee or named fiduciary.6Office of the Law Revision Counsel. 29 U.S. Code 1002 – Definitions The prohibited transaction exemption for the plan’s acquisition of employer stock depends on meeting that standard.7eCFR. 29 CFR 2550.408e – Statutory Exemption for Acquisition or Sale of Qualifying Employer Securities
The IQPA does not re-perform the valuation. The auditor reviews the appraiser’s work to determine whether the methodology is reasonable and adequately supported, looking at the standard valuation approaches used (income, market, asset-based), the reasonableness of projected cash flows and the discount rate, and any discounts applied for lack of marketability or lack of control. An inflated valuation causes the plan to overpay when it buys shares from the sponsor or from departing participants, which directly harms the remaining participants. The DOL has historically treated overvaluation as one of the most serious ESOP compliance failures.8U.S. Department of Labor. Fact Sheet – Notice of Proposed Rulemaking Relating to Application of the Definition of Adequate Consideration
Prohibited Transactions
ERISA broadly prohibits transactions between the plan and “parties in interest,” including the sponsoring employer, fiduciaries, service providers, and highly compensated employees. Certain ESOP transactions that would otherwise be prohibited are permitted when specific conditions are met. The most important is the ERISA Section 408(e) exemption for the plan’s acquisition of employer securities: the plan must pay no more than adequate consideration, and no commission can be charged to the plan.7eCFR. 29 CFR 2550.408e – Statutory Exemption for Acquisition or Sale of Qualifying Employer Securities For leveraged ESOPs, the auditor also tests the acquisition loan: the interest rate must be reasonable, the collateral appropriate, and the terms must not favor the lender at the plan’s expense. Fees paid to the trustee, third-party administrator, and appraiser are tested for reasonableness.
A transaction that fails to meet an exemption triggers a 15% excise tax on the amount involved for each year it remains uncorrected, with an additional 100% tax if it still isn’t corrected after the taxable period ends.9Office of the Law Revision Counsel. 26 U.S. Code 4975 – Tax on Prohibited Transactions The disqualified person who participated in the transaction pays the tax, not the plan.
Participant Account Activity
The auditor verifies that shares and contributions were allocated using the formulas in the plan document, which for leveraged ESOPs means confirming that shares were released from the suspense account properly as the loan was repaid. Vesting percentages applied to terminated participants are tested, as are distributions. ESOP distribution deadlines are strict: for participants leaving due to retirement, disability, or death, distributions must begin during the next plan year after departure; for other terminations, distributions can be delayed up to six years after the plan year of termination, and if an acquisition loan is still outstanding, distributions of the leveraged shares can be delayed further until the plan year after the loan is fully repaid.10Internal Revenue Service. Chapter 8 – Examining Employee Stock Ownership Plans
Diversification elections also get tested. Participants with at least three years of service must be allowed to diversify the portion of their account invested in employer stock that came from employer contributions, with the opportunity to move money into other investment options at least quarterly.11eCFR. 26 CFR 1.401(a)(35)-1 – Diversification Requirements for Certain Defined Contribution Plans For amounts tied to the participant’s own elective deferrals or rollover contributions, no service requirement applies.
The Repurchase Obligation
Departing participants in a privately held ESOP have the right to put their shares back to the employer. The put option must be exercisable for at least 60 days after distribution, with another 60-day window in the following plan year.10Internal Revenue Service. Chapter 8 – Examining Employee Stock Ownership Plans As the plan matures, that cash obligation grows. The auditor confirms proper disclosure in the financial statements and looks at whether the company can realistically meet upcoming repurchase demands. A plan that cannot honor its put obligation is denying participants access to their benefits, which is both a fiduciary failure and a plan qualification risk.
What to Have Ready Before Fieldwork
Disorganized records are the fastest way to run up audit costs. Have the governing documents in one place first: the plan document, trust agreement, amendments, summary plan description, and the most recent IRS determination letter. The auditor uses these to test whether the plan actually operates the way it says it does.
Then the participant data: a complete census, individual account statements, and transaction-level detail for every contribution, distribution, forfeiture, and share allocation during the plan year. That data lets the auditor reconcile total plan assets against the sum of individual balances. Documentation of internal controls over financial reporting should be ready too, since stronger controls reduce the volume of substantive testing.
The piece that sets an ESOP audit apart from any other benefit plan audit is the independent appraiser’s full valuation report, including methodology, key assumptions, discount rates, and supporting financial data. Without it, the audit essentially cannot proceed. Transaction records supporting every stock movement during the year matter just as much: leveraged ESOP loan payments, share purchases from the sponsor, share releases from the suspense account, and redemptions from departing participants.
The Audit Opinion and Filing Deadline
After fieldwork, the IQPA issues a formal opinion on whether the financial statements are presented fairly under generally accepted accounting principles.1Office of the Law Revision Counsel. 29 U.S. Code 1023 – Annual Reports Four outcomes are possible:
- An unmodified (clean) opinion means the financial statements are materially correct and comply with GAAP.
- A qualified opinion means the statements are generally correct but with a material scope limitation or specific GAAP departure the auditor cannot resolve.
- An adverse opinion means the statements are not fairly presented. This signals pervasive problems and typically draws DOL scrutiny.
- A disclaimer of opinion means the auditor could not get enough evidence to form any opinion. Rare and serious.
The completed report, along with Schedule H and the rest of Form 5500, is due by the last day of the seventh month after the plan year ends. For a calendar-year plan, that is July 31. Filing Form 5558 before the deadline extends it by two and a half months, pushing calendar-year plans to October 15.
Penalties for Missing the Audit or Filing Late
Missing the deadline or filing without the required audit report exposes the plan to penalties from both agencies. The DOL can impose a civil penalty of up to $2,739 per day for each day the plan administrator fails to file a complete report, with no statutory maximum.12U.S. Department of Labor. Instructions for Form 5500 The IRS separately charges $250 per day, up to $150,000 per return.13Internal Revenue Service. 401(k) Plan Fix-It Guide – You Haven’t Filed a Form 5500 This Year Those penalties run simultaneously, so a single late filing can accumulate close to $3,000 per day in combined exposure.
The DOL’s Delinquent Filer Voluntary Compliance Program reduces penalties significantly for plans that come forward on their own. Under DFVCP, the basic penalty drops to $10 per day, with a per-filing cap of $2,000 for large plans and $750 for small plans.14U.S. Department of Labor. Delinquent Filer Voluntary Compliance Program Using the program before the DOL makes contact is almost always worth it.
Fixing Problems the Audit Finds
When the audit uncovers operational failures, the plan sponsor has options under the IRS Employee Plans Compliance Resolution System that can preserve the plan’s tax-qualified status.15Internal Revenue Service. EPCRS Overview The Self-Correction Program lets a sponsor fix certain failures without contacting the IRS or paying a fee, but only before an IRS audit begins. The Voluntary Correction Program requires a fee and produces formal IRS approval of the correction, again only before an audit. The Audit Closing Agreement Program applies once the IRS is already examining the plan; the sponsor negotiates a sanction that reflects the nature, severity, and number of employees affected, and the IRS considers whether the plan had internal controls designed to catch problems early.
Catching and fixing errors through the annual IQPA audit, before the IRS looks at the plan, gives the sponsor access to the cheaper and less adversarial correction paths. Document the corrective actions taken; that record becomes evidence of good-faith fiduciary conduct if questions come up later.