A financial statement audit of a small to mid-sized company typically takes six to twelve weeks from start to finish, moving through three stages: planning, fieldwork, and reporting. Larger or more complex organizations often need four months or more. How long does a company audit take in your specific case comes down to three things: the size of the business, the quality of your internal records, and whether regulators require additional testing on top of the standard financial statement work.
The Three Stages and What Each One Costs You in Time
Every audit runs on the same basic clock. Planning and preparation take one to three weeks. Fieldwork takes two to four weeks for a small to mid-sized private company. Reporting and internal review add another one to two weeks. Add those together and you get the six-to-twelve-week range most companies experience. Anything that goes wrong in one stage pushes the next stage out.
Preparation: One to Three Weeks Before Fieldwork
The clock effectively starts when the audit firm sends over a Provided by Client list, usually called the PBC list. It’s a checklist of everything the auditors need: year-end financial statements, the general ledger, trial balances, bank statements, payroll summaries, aged receivables and payables, major contracts, board meeting minutes, and prior-year tax filings.
How fast you assemble those documents sets the pace for the rest of the engagement. Two things save the most time here. First, organize files to match the PBC list exactly, so the audit team isn’t emailing you daily asking where something is. Second, reconcile your accounts before fieldwork begins. Your trial balance should tie to every sub-ledger. Unreconciled accounts are one of the most common reasons audits run long.
Companies using enterprise resource planning or cloud accounting software can usually pull the required reports in a few days. If you rely on manual records or several disconnected systems, plan for a longer preparation window.
Fieldwork: Two to Four Weeks of Testing
Fieldwork is where the audit team spends the most time. For a small to mid-sized private company, expect two to four weeks. Complex operations can push this considerably longer.
During fieldwork, auditors verify that the numbers on your financial statements reflect real assets, liabilities, and transactions. They select samples of transactions and trace them to supporting documentation. They may observe an inventory count, send confirmations directly to your banks to verify cash balances, or follow an invoice from creation through approval to payment. Under PCAOB standards, samples must be selected so every item in the population has a chance of being chosen, using methods like random selection, stratified sampling, or systematic sampling with a random start.1PCAOB. AS 2315 Audit Sampling
Auditors also interview staff to understand how transactions flow through your systems and to clarify anything that looks off. This is where the timeline can slip. If testing turns up an unexplained variance, missing documentation, or a broken internal control, the team expands its testing to find the root cause. Expanded testing adds days or weeks depending on what they find.
Why Internal Controls Matter for the Schedule
A big part of fieldwork is evaluating the controls you use to catch and prevent errors: how expenses are approved, who has access to financial systems, whether duties are separated for sensitive functions like processing payments. Strong controls let auditors rely on your systems and test fewer individual transactions. Weak controls or missing procedures force the team to test more transactions directly, which adds time to the schedule.
Reporting: One to Two Weeks
Once fieldwork wraps, the audit firm goes into internal review, generally one to two weeks. Senior partners review the working papers to confirm the findings support the auditor’s opinion. The firm then drafts the formal audit report stating whether your financial statements are presented fairly under Generally Accepted Accounting Principles.
The engagement usually ends with a meeting between the auditors and your board or audit committee, where the auditors present the report, walk through any adjustments they proposed, and flag internal control weaknesses. Auditors must communicate material weaknesses and significant deficiencies in writing, distinguishing clearly between the two.2PCAOB. AU Section 325 – Communications About Control Deficiencies in an Audit of Financial Statements The signed report is the official end of the engagement.
What Pushes Your Audit Toward the Long End
The same audit can take six weeks at one company and four months at another. A handful of factors explain the spread.
- Company size and complexity. A small business with a few hundred transactions per year is often audited in four to six weeks. A large corporation with high transaction volumes, multiple subsidiaries, or complex revenue recognition can run three to four months or longer.
- Industry regulation. Healthcare, defense, and financial services carry compliance layers that expand the scope of testing.
- Quality of internal records. Clean, reconciled books with strong controls speed everything up. Disorganized records, unreconciled accounts, or missing documentation slow everything down.
- First-year versus recurring audit. A first-time audit takes longer because the auditors are learning your business, systems, and accounting policies from scratch. Returning auditors already have that baseline.
- Public versus private status. Publicly traded companies subject to the Sarbanes-Oxley Act need a separate evaluation of internal controls over financial reporting on top of the standard financial statement audit, which adds weeks.3GovInfo. Sarbanes-Oxley Act of 2002 – Section 404
When Extra Rules Extend the Timeline
If your company falls into one of the categories below, the standard six-to-twelve-week estimate doesn’t cover everything you owe. Each category adds testing or shortens deadlines.
SEC Filers
Companies that file with the Securities and Exchange Commission must submit audited GAAP financial statements as part of the annual Form 10-K.4U.S. Securities and Exchange Commission. All About Auditors What Investors Need to Know Deadlines after fiscal year-end vary by filer size: 60 days for large accelerated filers, 75 days for accelerated filers, and 90 days for all other filers.5U.S. Securities and Exchange Commission. Form 10-K These tight windows are why many public companies begin audit work before fiscal year-end. Under Sarbanes-Oxley, management must assess the effectiveness of internal controls over financial reporting, and the auditor must separately attest to that assessment; emerging growth companies are exempt from the auditor attestation but must still complete management’s assessment.3GovInfo. Sarbanes-Oxley Act of 2002 – Section 404
Recipients of Federal Awards
Any non-federal entity—state and local governments, nonprofits, universities—that spends $1,000,000 or more in federal awards during its fiscal year must undergo a Single Audit.6eCFR. 2 CFR 200.501 Audit Requirements The Office of Management and Budget raised that threshold from $750,000 to $1,000,000 effective October 1, 2024.7Federal Register. Guidance for Federal Financial Assistance A Single Audit covers both financial statements and program-specific compliance, so it takes longer than a standard audit. Organizations spending less than $1,000,000 in federal awards are exempt from the Single Audit, though records still must be available for federal agencies and the Government Accountability Office.
Employee Benefit Plans
Under ERISA, the plan administrator must engage an independent qualified public accountant to examine the plan’s financial statements and issue an opinion on whether they’re fairly presented under GAAP.8Office of the Law Revision Counsel. 29 USC 1023 – Annual Reports The Department of Labor exempts most small plans, but plans with 100 or more participants holding account balances generally must attach an independent audit to their Form 5500. A transitional rule known as the 80-120 rule lets a plan near the line keep its prior-year filing status as long as participant count stays between 80 and 120.
How to Keep Your Audit on the Short End
The variables you actually control are all in preparation. Reconcile every account before the auditors arrive. Organize documents to mirror the PBC list. Make sure the staff who understand your transactions and controls are available for interviews rather than out of the office during fieldwork. Address any control weaknesses flagged in the prior year’s management communications so the current year’s testing doesn’t have to re-examine the same problems. A company that hands over clean, reconciled books finishes closer to six weeks. A company that makes the audit team hunt for records finishes closer to twelve, or later.