When a firm approaches you with an audit or assurance proposal, the document often feels dense with technical jargon that obscures what you're actually paying for and what guarantees you're receiving. Understanding the core sections of these proposals directly impacts whether you get value, avoid hidden costs, and align with auditors who match your company's risk profile and complexity.
Scope of Work: The Foundation
The scope section defines exactly what the auditor will examine and what they won't. This is where vagueness costs you money. A clear scope specifies:
- Which business units, locations, or divisions are included
- The fiscal period being audited (full year, interim, or specific months)
- Whether the audit covers consolidated or standalone financials
- Materiality thresholds—the dollar amount above which errors are flagged
Ask your auditor to be explicit about exclusions. If they won't audit your foreign subsidiary or specific account categories, that limitation should appear in writing. Many firms discover mid-audit that certain areas weren't covered, leading to surprise costs or compliance gaps. Request a detailed walkthrough of which systems they'll test, how many transactions they'll sample, and which account balances they'll verify.
Fee Structure and Resource Allocation
Audit fees typically range from $15,000 to $100,000+ annually for mid-market companies, depending on complexity, transaction volume, and internal control maturity. The proposal should break down costs by:
- Partner time: Usually billed at $300–$500+ per hour
- Senior manager and staff time: $150–$300 per hour
- Out-of-pocket expenses: Travel, software licenses, or specialist consultants
- Fixed vs. variable components: Some firms charge a base fee plus variable costs based on actual hours
Red flags include proposals with vague "estimated fees" or ones that bundle too many services into a lump sum without itemization. Request an estimate of total hours by staff level—this reveals whether the audit is properly resourced. An understaffed audit often misses control weaknesses or relies too heavily on management representations.
Assurance Standards and Methodology
Your auditor must clearly state which standards they follow: AICPA Generally Accepted Auditing Standards (GAAS) if you're in the US, International Standards on Auditing (ISA) for global firms, or specific regulatory standards if you're in banking, insurance, or nonprofits.
The proposal should explain their audit approach—specifically, how much they'll rely on automated testing versus manual procedures, whether they use continuous auditing tools, and how they identify high-risk areas. Companies with strong internal controls and mature ERP systems typically see lower fees because the auditor can rely more on system-generated reports. Weaker controls mean more manual testing and higher costs.
Timeline and Deliverables
A solid proposal includes a detailed timeline with specific milestones:
- Planning phase: 2–4 weeks (interim audit period)
- Fieldwork: 4–8 weeks (year-end audit fieldwork)
- Reporting: 2–3 weeks (review findings and finalize audit report)
Confirm the expected number of days on-site versus remote work, especially post-pandemic. Also clarify what reports you'll receive beyond the standard audit opinion. Many proposals now include management letters documenting control deficiencies, internal control assessments, or compliance observations. Some firms offer optional services like fraud risk assessments or IT system audits—these should be listed separately with additional fees.
Management Representation and Independence
The proposal should confirm the auditor's independence—no material financial relationships with your firm that could compromise objectivity. Look for their quality control procedures, partner rotation policies, and how they handle conflicts of interest.
You'll also need to provide management representations at audit completion (essentially your written confirmation that you've provided complete and accurate information). The proposal should specify what representations they'll request, so you're not caught off-guard late in the process.
Key Questions Before Signing
Compare proposals side-by-side using a structured checklist. If you're evaluating multiple firms, Mercoly helps you gather and compare audit proposals from trusted providers in one platform, making it easier to spot gaps and negotiate terms.
Ask each bidder: Will there be any additional fees if we discover material weaknesses? How do you handle staffing if your primary partner becomes unavailable? What happens if we expand operations mid-year?
Frequently Asked Questions
Q: What's a reasonable contingency if audit fees run over estimate? Most firms budget 10–15% overrun tolerance. Anything beyond that should trigger a conversation, but significant scope changes (new locations, system implementations, or acquisitions) justify additional costs.
Q: Should we negotiate audit fees? Yes. If you have strong internal controls, clean prior audits, and stable operations, you have leverage. Firms often discount 5–10% for multi-year engagements or if they can streamline fieldwork.
Q: What happens if the auditor finds fraud during the audit? The proposal should clarify their fraud reporting obligations (usually to the audit committee and potentially regulators). Ask upfront how this affects fees and whether they carry fraud liability insurance.
Start your audit firm comparison today and ensure your next proposal includes every element your business needs.