Audit & Compliance: Stop Treating the 10-K as a Formality

Why is my auditor asking about going concern again?

If you've ever been on the receiving end of that question, you know the panic that follows. It feels like an accusation, a shadow of doubt cast over your entire operation. But here's the thing: that question is not a formality, and it's not a trap. It's the single most important compliance conversation you'll have all year. I've seen too many finance teams treat the 10-K and the audit that underpins it as a bureaucratic hurdle, a box to tick before the real work of running the business resumes. That's a mistake—a costly one.

My thesis: The audit is a strategic tool, not a compliance chore

I'm going to say something that might get me sideways glances in the CFO lounge: the audit, and the compliance framework around it, is not your enemy. It's your ally. The Sarbanes-Oxley Act of 2002, Public Law 107-204, was signed into law to protect investors by improving the accuracy and reliability of corporate disclosures. That's not just a mission statement for regulators; it's a blueprint for building trust in your numbers. When you embrace the audit as a tool for clarity, you're not just satisfying the PCAOB or your audit committee—you're building a stronger business. The alternative is to be the company that gets caught flat-footed when a material weakness surfaces, and nobody wants to be that company.

What the audit really does (and why it matters)

Let's get concrete. An audit is an independent examination of an entity's financial statements and records. Under PCAOB AS 2105, the auditor must establish a materiality level for the financial statements as a whole and plan and perform audit procedures to detect misstatements that would result in material misstatement. The standard adopts the U.S. Supreme Court's definition of material information as that which would be viewed by a reasonable investor as significantly altering the total mix of information made available. That's not just about catching typos; it's about ensuring that a reasonable investor can rely on your numbers to make decisions. And that reliability is the foundation of your company's credibility in the capital markets.

Now, I know what the skeptics are thinking. They're thinking: "Sure, but the audit is a backward-looking exercise. It's about last year's numbers, and the real value is in forward-looking strategy." To that, I say: the audit forces you to clean up your act in ways that pay dividends for years. When you go through the discipline of documenting your internal controls—something SOX Section 404 requires management to assess—you gain a level of visibility into your operations that you simply don't get from a dashboard. You find the redundant processes, the control gaps, the areas where fraud could hide. That's not a chore; that's a competitive advantage.

The real risk: ignoring the going concern question

Let's talk about the elephant in the room: going concern. Under U.S. GAAP, specifically ASU 2014-15, management must evaluate whether there is substantial doubt about the entity's ability to continue as a going concern. Substantial doubt exists when conditions and events indicate it is probable the entity will be unable to meet its obligations when due within one year after the financial statements are issued. This isn't a theoretical exercise. If your auditors suspect you might not make it, they have a responsibility to flag it. And if they do, the market will react—hard. I've seen companies that ignored early warnings from their auditors, only to face a sudden loss of confidence when the going concern language finally appeared in a filing. The audit is your early warning system. Use it.

Here's a quick tip: when your auditor asks about going concern, don't just hand them your cash flow forecast. Walk them through your debt covenants, your customer concentration, and your contingency plans. Show them you've thought about the risks, and you'll build the kind of trust that keeps the audit process constructive.

• Treat the audit as a diagnostic, not a police investigation.
• Invest in clean documentation—it pays off in faster close and less friction.
• Involve the audit committee early and often; they're your allies, not your adversaries.

The counter-argument: audits are too expensive and too slow

I hear the pushback: "Audits are expensive, they consume weeks of our finance team's time, and they force us to over-document everything. Is it worth it?" It's a fair question, and there's a kernel of truth there. The cost of compliance is real, and the SEC's filing deadlines are tight. Large accelerated filers—those with a public float of $700 million or more—must file Form 10-K within 60 days of fiscal year end, and accelerated filers within 75 days. That's a sprint, and it can be brutal on your team. But here's the thing: the cost of not doing it right is far greater. A single material weakness can send your stock price tumbling, trigger shareholder lawsuits, and invite SEC scrutiny. The audit is insurance, and it's the cheapest insurance you'll ever buy.

Moreover, the audit process has evolved. The PCAOB adopted AS 1000, General Responsibilities of the Auditor in Conducting an Audit, on May 13, 2024. This standard enhances and consolidates standards adopted on an interim basis in April 2003 that address general principles and responsibilities of the auditor such as due professional care, professional skepticism, competence, and professional judgment. It's not about adding more work; it's about making the work smarter. When auditors are clear about their responsibilities, the process becomes more efficient, not less.

My recommendation: Embrace the audit as a strategic asset

So, here's my point of view: stop treating the audit as a compliance requirement to be endured. Start treating it as a strategic asset that gives you a clearer picture of your business. Work with your auditors, not against them. Share your concerns, ask about their risk assessment, and use their insights to strengthen your internal controls. The result will be a cleaner 10-K, a faster close, and a more resilient organization.

I'm not saying it's easy. I'm saying it's worth it. The next time your auditor asks about going concern, don't flinch. Answer the question, and then ask what else they see. That's the beginning of a productive relationship, not an adversarial one.

Sources

• GAAP - https://www.fasb.org
• PCAOB AS 2105 - https://pcaobus.org/oversight/standards/auditing-standards/details/AS2105
• CAQ Going Concern - https://www.thecaq.org/going-concern-management-and-auditor-responsibilities
• SOX (Public Law 107-204) - https://www.govinfo.gov/content/pkg/PLAW-107publ204/html/PLAW-107publ204.htm
• SEC - https://www.sec.gov/files/rules/final/33-8644.pdf
• PCAOB AS 1000 - https://pcaobus.org/news-events/news-releases/news-release-detail/pcaob-solidifies-foundation-of-every-audit-with-adoption-of-new-standard-on-general-responsibilities-of-the-auditor