Choosing the wrong audit firm can cost you thousands in wasted fees, incomplete findings, or missed risk flags. The stakes are too high to make this decision on referrals alone or price alone. Here's what to ask before you commit.
What Type of Audit Do You Actually Need?
Most companies conflate "audit" with a full external financial statement audit—but that's not always what you need. An audit & assurance firm should walk you through the differences between:
- Financial statement audits (required by lenders, investors, or regulators; typically $15K–$75K+)
- Internal audits (assess your operational and financial controls; $10K–$50K)
- Compliance audits (verify adherence to specific regulations like HIPAA, SOX, or industry standards)
- Agreed-upon procedures (limited-scope work; lower cost, typically $5K–$20K)
Ask the firm directly: "Based on our size and industry, what do we legally or contractually need?" A good firm will help you avoid overspending on unnecessary work or, conversely, flag if you're trying to cut corners on something required.
Who Will Actually Do the Work?
The partner you meet is rarely the person auditing your books. Ask:
- How many staff auditors will be assigned and for how long?
- What's their experience level (senior manager vs. junior associate)?
- Will the same team return next year, or do you rotate staff each cycle?
- What's the partner's direct involvement—are they just signing off, or actively reviewing?
Firms with adequate staffing prevent slow timelines and sloppy work. A team that stays consistent year-to-year understands your business better and catches emerging issues faster.
What's the Fee Structure and Timeline?
Vague pricing invites bill shock. Request a detailed engagement letter that specifies:
- Total estimated fees (broken down by phase if possible)
- What's included (fieldwork, management letter, follow-up meetings)
- What costs extra (if they find major issues requiring expanded procedures, how are you billed?)
- Restatement or remediation fees (some firms charge additional fees if material errors are discovered)
Ask about timeline too: "When will fieldwork start, when will we get preliminary findings, and when's the final report due?" Most mid-sized audits run 6–12 weeks from kickoff to completion. If a firm promises to turn around a complex audit in two weeks, that's a red flag.
Can They Handle Your Specific Industry or Compliance?
A general CPA firm isn't the same as one with deep expertise in your sector. If you're in healthcare, nonprofits, construction, or financial services, the audit approach differs significantly.
Ask:
- How many clients do you serve in our industry?
- Are you familiar with [relevant standard—AICPA guidance, HIPAA, SOX, state-specific regs]?
- Do you have experience with our ERP system?
A firm that's audited similar companies will spot industry-specific risks you might miss and work efficiently within your systems.
What's Your Plan for Control Deficiencies?
An audit isn't just a pass-or-fail checkmark. The real value is in identifying weaknesses. Ask the firm:
- How will you document control gaps in the management letter?
- Will you prioritize findings by severity or impact?
- Do you offer remediation advisory services, or just reporting?
- Can you explain findings clearly to our board/audit committee?
A firm that presents findings with concrete examples and remediation steps—not just jargon—helps you actually fix problems. Some firms bundle advisory into their audit fee; others charge separately.
Will They Be Available Year-Round?
Audits don't end at the final report. Tax season questions, interim reviews, or regulatory inquiries pop up throughout the year. Confirm:
- What's the response time for ad-hoc questions during non-audit months?
- Is there an additional fee for interim consultations?
- How accessible is your primary contact?
A firm that's reachable and responsive during off-season saves you from scrambling when regulators call.
Bring Comparisons Together
Don't choose based on one estimate. Mercoly lets you compare audit & assurance providers side-by-side—scope, pricing, credentials, and client reviews—so you can see what you're actually getting for the fee.
Frequently Asked Questions
Q: How often should we have an external audit? Annual audits are standard for public companies and many contractual requirements; private companies may audit every 2–3 years depending on lender or investor demands. Check your loan agreements and stakeholder requirements.
Q: What's the difference between an audit and a review? An audit provides high assurance that financial statements are fairly presented; a review offers limited assurance at a lower cost (typically 30–50% less). Reviews are less rigorous and don't test internal controls.
Q: Can the same firm do our audit and tax return? Yes, but confirm they have a separation of duties—the audit team should be independent from the tax team to avoid bias. Some firms decline combined work to maintain objectivity.
Start comparing audit firms today and ask these questions before signing any engagement letter.