Financial Audit: Process and Compliance with Standards

A financial audit is not intended to detect fraud or to guarantee the financial health of a company. Its purpose is narrower and more precise: to provide reasonable assurance that the annual financial statements are compliant, accurate, and give a true and fair view. Understanding this limitation avoids two symmetrical mistakes — expecting a guarantee from the audit that it does not provide, and underestimating the actual scope of the opinion issued.

Statutory audit and contractual audit

Two very different situations bear the same name.

The statutory audit is the engagement performed by the statutory auditor, carried out within a regulated framework: appointment for a six-fiscal-year term, mandatory professional standards, strict incompatibility rules, and reporting obligations. The statutory auditor is not the company's advisor: they are appointed by the shareholders and report to them.

The contractual audit is an engagement freely defined between the company and a professional: limited review, acquisition due diligence, or examination of a specific item. Its scope, recipient, and level of assurance stem from the engagement letter. It does not carry any of the legal obligations attached to the statutory mandate.

Confusing the two leads to overestimating the scope of a contractual report, whose perimeter may be very limited.

When appointment is mandatory

Appointing a statutory auditor becomes mandatory when the entity exceeds two of the three thresholds relating to total balance sheet, revenue, and headcount. These thresholds are periodically revised and must be checked for the fiscal year concerned.

Three special cases add to this principle:

• Companies that are group parent companies controlling other companies are subject to their own rules, assessed at the group level.
• The significant subsidiaries of a group that has a statutory auditor may also be required to appoint one.
• A minority of shareholders may petition the courts for the appointment of a statutory auditor, even below the thresholds.

Voluntary appointment remains possible, and it is common when a financial partner requires it. It then carries the same obligations as a mandatory appointment.

How the engagement unfolds

The audit takes place in three phases, spread across the fiscal year rather than concentrated at year-end.

Understanding the business and assessing risk. The auditor analyzes the business activity, environment, and internal controls to identify areas where a material misstatement is likely. This step shapes everything that follows: subsequent procedures are scaled to the risks identified.

Interim procedures. Performed during the fiscal year, these cover processes and day-to-day operations. This is when weaknesses in bookkeeping practices become apparent — chronology, supporting documents, segregation of duties.

Year-end procedures. After year-end close, these focus on the financial statements themselves: balance validation, third-party confirmations, and review of accounting estimates. The latter draw particular attention, since they rely on judgment: receivable write-downs, provisions, depreciation.

The opinion and its three forms

The report concludes with an opinion, whose wording is standardized and each variant carries a precise meaning.

An unqualified opinion states that the financial statements are compliant, accurate, and give a true and fair view.

A qualified opinion flags a disagreement or limitation whose effect is material but not pervasive. This is a strong signal, often misread by third parties, who mistakenly treat it as a minor remark.

A disclaimer of opinion applies when the effect is both material and pervasive, or when the auditor was unable to gather the necessary evidence.

An emphasis of matter may be added without affecting the opinion: it draws attention to a point in the notes, typically an uncertainty regarding going concern. It does not constitute a qualification.

The statutory auditor's specific obligations

Two obligations clearly distinguish the statutory mandate from a contractual engagement.

Reporting criminal offenses. A statutory auditor who identifies facts that may be characterized as criminal offenses must report them to the public prosecutor. This obligation leaves no room for discretionary judgment, and failing to comply exposes the auditor to liability.

The early warning procedure. When the auditor identifies facts likely to jeopardize going concern, they trigger a graduated procedure: requesting explanations from management, informing the corporate bodies, and then informing the presiding judge of the court. The goal is to prompt a response before the company becomes insolvent — an issue directly tied to the director's personal liability, discussed in our article on director liability.

Use cases

Crossing the thresholds. The appointment requirement is assessed at year-end and applies for six fiscal years. Anticipating this a year in advance makes it possible to prepare processes rather than face a first audit on unprepared accounting records.

Fundraising or sale. The acquisition audit is contractual, and its scope is negotiated. Precisely defining what is audited — and what is not — avoids misunderstandings about the scope of the report delivered.

Anticipated qualification. Address the underlying cause before the next year-end close. A qualification carried over from one fiscal year to the next weighs heavily on the relationship with financial partners.

Frequently asked questions

When is a statutory auditor mandatory? When two of the three thresholds relating to balance sheet, revenue, and headcount are exceeded, as well as in specific situations involving groups or upon request by a minority of shareholders.

What is the difference between a statutory audit and a contractual audit? The statutory audit is carried out within a regulated framework, with a six-year term and specific obligations. The contractual audit has whatever scope is defined in the engagement letter, without these obligations.

Does the auditor detect fraud? That is not the purpose of the engagement, which focuses on material misstatements in the financial statements. However, the auditor designs their procedures with fraud risk in mind.

What does a qualified opinion mean? A disagreement or limitation with a material but not pervasive effect. It is a serious signal, distinct from a simple emphasis of matter, which does not affect the opinion.

What is the early warning procedure? A graduated procedure triggered when going concern appears jeopardized, ranging from requesting explanations from management to informing the presiding judge of the court.

Can the statutory auditor advise the company? Not on matters covered by the engagement: independence rules and incompatibility restrictions prohibit it. The auditor is not the company's advisor but reports to the shareholders.

Key takeaways

An audit provides reasonable assurance about the compliance and accuracy of the financial statements — not a guarantee against fraud, nor an opinion on the company's financial health. This limited scope is what matters most before reading a report.

Three points deserve a director's attention. The exact form of the opinion, since the distinction between an emphasis of matter, a qualification, and a disclaimer is critical for third parties. The specific obligations of the statutory auditor — reporting and early warning — which set them apart from a mere service provider. And the fact that most of the auditor's work focuses on accounting estimates: this is where the company's judgments are examined, and where the quality of documentation makes a difference, as is also the case during a tax audit.