When evaluating your organisations financial reporting requirements, choosing the right level of external assurance is a key decision. Many stakeholders assume an audit and a review are interchangeable compliance exercises. In reality, they represent fundamentally different levels of depth, scope, and cost. Understanding the distinction helps decision-makers select the appropriate service for their governance needs, statutory obligations, and stakeholder expectations.
The Spectrum of Assurance
Assurance engagements exist on a spectrum. At one end is a compilation (preparing financial statements without providing an opinion), and at the other is a full financial audit. A review sits in the middle. The primary difference lies in the level of assurance provided and the nature and extent of the procedures performed by the practitioner.
What is a Financial Audit?
An audit provides reasonable assurance, the highest level of assurance an independent professional can offer.
- The Goal: To express an opinion on whether the financial statements are prepared, in all material respects, in accordance with the applicable financial reporting framework.
- The Approach: Highly rigorous and risk-based. Auditors test internal controls, physically verify assets, confirm balances directly with third parties (such as banks and debtors), and perform extensive substantive testing of transactions.
- The Outcome: A positive expression of opinion (e.g., that the financial statements “present fairly” or give a “true and fair view”).
What is a Financial Review?
A review provides limited assurance, a moderate level of assurance.
- The Goal: To state whether anything has come to the auditor’s attention that causes them to believe the financial statements are not prepared in accordance with the framework.
- The Approach: Primarily analytical and enquiry-driven. Review procedures focus heavily on discussions with management, analytical reviews of financial trends, and comparison of expected results. It generally does not involve testing internal controls or extensive third-party confirmations.
- The Outcome: A negative form of expression (e.g., “nothing has come to our attention that causes us to believe that the financial statements do not comply”).
Key Differences in Effort and Cost
Because the scope of a review is narrower and relies more on inquiry rather than exhaustive testing of underlying records, it requires significantly less time and effort than an audit. Consequently, a review is generally a more cost-effective option. However, lower cost comes with a trade-off: limited assurance provides a much lower level of comfort to external users.
Choosing the Right Option
Deciding between an audit and a review depends on several practical factors:
- Statutory and Regulatory Rules: Law, constitutions, or funding agreements often explicitly mandate an audit.
- Stakeholder Requirements: Banks, major investors, or regulatory bodies frequently demand the higher credibility of a full audit.
- Organisational Complexity and Risk: Large, complex entities with diverse operations or high inherent risk benefit from the robust depth of an audit.
- Internal Governance Value: Boards seeking deeper insights into internal control weaknesses and operational processes often prefer an audit.
Audit or Review? A Quick Decision Checklist
An audit is likely the better choice if:
- An audit is required by legislation, funding agreements, or governance documents.
- Banks, investors, regulators, or other stakeholders require audited financial statements.
- The organisation has complex operations, significant assets, or plans for future growth.
- The board wants greater assurance over financial reporting and internal controls.
- External investment, mergers, acquisitions, or financing discussions are anticipated.
A review may be appropriate if:
- There is no statutory or contractual requirement for a full audit.
- Stakeholders are comfortable receiving limited assurance.
- The organisation’s operations and reporting requirements are relatively straightforward.
- Cost is a significant consideration and a lower level of assurance is acceptable.
- Strong internal governance and oversight processes are already in place.
Key Questions to Ask
Before making a decision, consider:
- What level of assurance do our stakeholders expect?
- Do any lenders, funders, or regulators require an audit?
- Are we likely to require an audit in the near future?
- How important is independent testing of controls and balances?
- Are any growth plans likely to trigger future audit requirements?
Rule of thumb: If regulatory obligations, stakeholder expectations, or future requirements are unclear, it is generally worth confirming these requirements before selecting a review based solely on cost considerations.
Common Pitfalls When Choosing Between an Audit and a Review
When choosing a review over an audit, organisations often face hidden pitfalls that can lead to unexpected costs, compliance failures, or strained stakeholder relationships.
Here are the key pitfalls to look out for:
- The “False Economy” Trap
- The Risk: Starting with a review to save money, only to find a stakeholder later rejects it and demands an audit.
- The Consequence: You end up paying for both services. A review cannot simply be “upgraded” to an audit mid-way through. The auditor must perform entirely different risk assessment and testing procedures from scratch.
- The “Missed Fraud” Trap
- The Risk: Assuming a review will uncover internal fraud, employee theft, or accounting manipulation.
- The Consequence: Reviews rely heavily on management’s explanations and analytical trends. They do not involve testing internal controls or verifying physical assets. If management is unaware of a fraud scheme, a review is highly unlikely to detect it, leaving the board exposed.
- The “Bank Loan Covenant” Trap
- The Risk: Overlooking the fine print in commercial lending agreements.
- The Consequence: Many banks mandate a full annual audit as a condition of a loan. Submitting a review instead can trigger a technical default, allowing the bank to reprice the loan, demand immediate repayment, or refuse future funding lines.
- The “Growth Threshold” Trap
- The Risk: Failing to project organisational growth against statutory thresholds.
- The Consequence: If your revenue or assets scale rapidly mid-year and push you over the legal threshold for a mandatory audit, you may be legally locked into an audit anyway. Failing to plan for this leaves the finance team rushing to prepare for a much more rigorous process.
- The “Losing the History” Trap
- The Risk: Switching from an audit to a review, and then needing to switch back to an audit a few years later (e.g., due to growth or a new investor).
- The Consequence: First-year audits (or returning audits) are significantly more expensive. The audit team must spend extra time opening and verifying the prior year’s comparative balances, effectively erasing any short-term savings made during the review years.
Alternating between an audit and a review every other year is a strategy some organizations use to manage costs. However, this approach creates a critical assurance gap.
A review conducted in Year 2 cannot retrospectively substitute for or maintain the level of audit assurance established in Year 1.
The Illusion of “Roll-Over” Assurance
Each financial year stands alone as an independent reporting period. The high level of reasonable assurance gained from an audit does not carry forward or “blanket” the following year.
When you switch to a review for Year 2, your stakeholders receive only limited assurance for that specific 12-month period. If a material misstatement, control failure, or fraud occurs during the review year, the procedures performed are rarely deep enough to catch it. You cannot use the previous year’s audit to justify confidence in the current year’s unverified numbers.
The “Opening Balances” Paradox
The biggest trap of alternating years surfaces when you return to an audit in Year 3.
To give a clean audit opinion on Year 3, auditors are required by professional standards (ISA 510) to obtain sufficient evidence that the opening balances (the closing numbers from the Year 2 review) are accurate. Because Year 2 was only reviewed, the auditors cannot take those numbers at face value.
To bridge this gap, the audit team must perform:
- Retrospective testing on Year 2 transactions.
- Roll-back procedures on inventory, receivables, and payables.
- Additional verification of accounting estimates made during the review year.
The Cost and Effort Penalty
This creates a self-defeating cycle. The extra time and fees required to audit the opening balances in Year 3 frequently wipe out the cost savings achieved by doing a review in Year 2.
Furthermore, your finance team faces a double workload in Year 3, as they must dig up historical documentation from the prior year to satisfy the auditors. Ultimately, alternating years disrupts the consistency of your financial governance and leaves a permanent “weak link” in your reporting history.
Final Thoughts
Choosing between an audit and a review involves balancing cost against the required level of assurance for financial reporting. While reviews offer a cost-effective, inquiry-driven, limited assurance, an audit provides reasonable assurance through rigorous testing of controls and data. Selecting a review to save money can lead to pitfalls, such as lender rejection or missed fraud detection, and alternating between the two often eliminates cost savings due to the “Opening Balances Paradox” when returning to an audit. Ultimately, the decision should be based on statutory requirements, stakeholder demands, and the need for internal control assessment.
How Moore Markhams can Help
Choosing the right assurance engagement can have significant implications for governance, stakeholder confidence, compliance obligations, and long-term costs. If you’re unsure whether an audit or review is the right fit for your organisation, contact your local Moore Markhams advisor for practical guidance tailored to your circumstances.
