A public company audit report is the independent accounting firm’s written opinion, attached to every annual Form 10-K, on whether a corporation’s financial statements fairly present its financial condition. Federal securities law requires it, the Public Company Accounting Oversight Board (PCAOB) sets the standards it must follow, and the Securities and Exchange Commission makes the finished document public. For an investor, it is the shortest reliable answer to the question of whether the numbers behind a stock price have been checked by someone other than the company itself.
What the Report Must Say
PCAOB Auditing Standard 3101 dictates the form. The document carries the title “Report of Independent Registered Public Accounting Firm” and is addressed to the company’s shareholders and board of directors. It opens with the auditor’s opinion on the financial statements, then moves into a “Basis for Opinion” section that explains how the audit was conducted, states that the firm is registered with the PCAOB, and confirms that federal securities law requires the firm to be independent of the company.1Public Company Accounting Oversight Board. AS 3101 The Auditors Report on an Audit of Financial Statements When the Auditor Expresses an Unqualified Opinion
The basis section also describes the auditor’s responsibility: to plan and perform the audit to obtain reasonable assurance that the statements are free of material misstatement, whether caused by error or fraud. Administrative details close the document, including the firm’s signature, the city and state where the report was issued, and a disclosure of the year the firm began serving consecutively as the company’s auditor. That tenure line lets investors see at a glance how long the relationship has run, since very long tenures raise independence questions and very fresh ones can signal trouble.
Independence itself is governed separately by SEC Rule 2-01 of Regulation S-X, which restricts financial ties, employment relationships, and non-audit services between an auditor and its client.2eCFR. 17 CFR 210.2-01 – Qualifications of Accountants The SEC has revised those rules over time to concentrate on relationships that genuinely threaten objectivity.3Securities and Exchange Commission. SEC Updates Auditor Independence Rules
The Four Opinion Types
The opinion is the single most important line. In one or two words it tells you whether the financial statements can be trusted. There are four possibilities, and they run from reassuring to alarming.
Unqualified Opinion
This is the clean opinion, and it is what every public company wants. The auditor concluded that the financial statements present the company’s financial position fairly in all material respects, in line with generally accepted accounting principles. Most large public companies receive one, and the absence of one usually prompts immediate questions.
Qualified Opinion
A qualified opinion says the financial statements are fair except for a specific issue. The report has to use the word “except” or “exception” in a phrase like “except for” so the qualification is unmistakable. Weaker phrases like “subject to” are prohibited.4Public Company Accounting Oversight Board. AS 3105 – Departures from Unqualified Opinions and Other Reporting Circumstances The rest of the statements may be perfectly reliable; the qualification points you to the area that isn’t.
Adverse Opinion
An adverse opinion is the worst outcome. The auditor states outright that the financial statements do not fairly represent the company’s financial condition, typically because of widespread departures from accounting standards or material misstatements that management refuses to correct.4Public Company Accounting Oversight Board. AS 3105 – Departures from Unqualified Opinions and Other Reporting Circumstances The market reaction can be severe, and stock exchanges may open compliance review procedures because listing standards generally require accurate financial reporting.
Disclaimer of Opinion
A disclaimer means the auditor could not form a conclusion at all. This happens when a scope limitation, such as missing records or denied access to key data, kept the auditor from gathering enough evidence. The company’s financial condition is left unverified, which tends to draw regulatory attention.
Going Concern Warnings
Under PCAOB Auditing Standard 2415, the auditor must evaluate whether there is substantial doubt about the company’s ability to continue operating for at least one year beyond the date of the financial statements.5Public Company Accounting Oversight Board. AS 2415 Consideration of an Entitys Ability to Continue as a Going Concern If that doubt survives the auditor’s review of management’s plans, the report must add an explanatory paragraph containing the phrase “substantial doubt about its ability to continue as a going concern.”
A going concern paragraph does not change the opinion. A company can receive an unqualified opinion and still carry the warning. To investors, though, it is a red flag: the company’s own auditor has flagged a real risk of failure within twelve months. The reverse is not a guarantee. The absence of a going concern paragraph means only that the auditor did not identify conditions crossing the “substantial doubt” threshold as of the report date. Auditors are not forecasters.
Critical Audit Matters
Critical audit matters, or CAMs, are the parts of the audit that required the most difficult, subjective, or complex judgment. To qualify, the matter must have been communicated to the audit committee and must relate to accounts or disclosures that are material to the financial statements.6Public Company Accounting Oversight Board. Auditor Reporting Common examples include complex revenue recognition models, fair value estimates for hard-to-price assets, and goodwill impairment assessments.
For each CAM, AS 3101 requires the auditor to identify the matter, explain why it qualified as a CAM, describe how the audit addressed it, and reference the specific accounts or disclosures involved. If no CAMs were identified, the report must say so explicitly. The CAM section does not change the overall opinion; it shows you where the hardest judgment calls happened and where a careful reader should look inside the financial statements themselves.
Explanatory and Emphasis Paragraphs
Even in a clean report, the auditor sometimes has to flag circumstances that don’t rise to the level of a qualification but still matter. AS 3101 lists specific situations that require explanatory language, including:
- A change in accounting principles that materially affects the financial statements.
- A correction of a prior misstatement, meaning a restatement of previously issued statements.
- Divided responsibility, where the auditor relied on another firm’s work for a significant subsidiary.
- An internal control reporting gap, where management is required to report on controls but the auditor was not engaged to audit that assessment.
Beyond those, the auditor may add an “emphasis of matter” paragraph to draw attention to things like significant related-party transactions or important subsequent events. These paragraphs are the auditor’s way of saying “look here” without saying “something is wrong.”
The Second Opinion on Internal Controls
Audit reports for most large public companies contain a second opinion beyond the financial statements: an assessment of the company’s internal control over financial reporting. Section 404 of the Sarbanes-Oxley Act requires management to evaluate whether its internal control systems are effective, and the outside auditor must attest to that assessment with its own opinion.7GovInfo. Sarbanes-Oxley Act of 2002 – Section 404
The controls opinion matters because financial statements can look accurate in any given year even when the systems producing them are unreliable. A company with weak controls is more likely to report errors or fraud later, so the controls opinion is a forward-looking read that the financial statement opinion alone does not give.
Not every company has to obtain the auditor attestation. Emerging growth companies are exempt under Sarbanes-Oxley itself, and the SEC has extended that exemption to non-accelerated filers, generally companies with a public float below $75 million, and to smaller accelerated filers that do not meet certain revenue thresholds.8U.S. Securities and Exchange Commission. Emerging Growth Companies Those smaller companies still include management’s own assessment of controls; the auditor just doesn’t sign off on it.
Where to Find the Report and How to Read It
Every audit report is public. The SEC’s EDGAR database is the central, free repository for all public company filings, searchable by company name or ticker symbol.9Securities and Exchange Commission. Search Filings Open the most recent annual 10-K and scroll to the financial statement section. Most companies also post the same filing under “Investor Relations” on their own websites.
Look for the heading “Report of Independent Registered Public Accounting Firm,” which sits just before the financial statements. Read the opinion paragraph first to see whether the company received a clean opinion. Then scan for a going concern paragraph and read through the critical audit matters. If the company is large enough to require an internal controls opinion, it will appear as a separate report or a clearly labeled section immediately before or after the financial statement opinion. Between those pieces you have the auditor’s full answer on whether the numbers can be trusted and where the risks sit.