by An external auditor performs an audit, in accordance with specific laws or rules, of the financial statements of a company, government entity, other legal entity, or organization, and is independent of the entity being audited. Users of these entities’ financial information, such as investors, government agencies, and the general public, rely on the external auditor to present an unbiased and independent audit report.
The manner of appointment, the qualifications, and the format of reporting by an external auditor are defined by statute, which varies according to jurisdiction. External auditors must be members of one of the recognised professional accountancy bodies. External auditors normally address their reports to the shareholders of a corporation. In the United States, certified public accountants are the only authorized non-governmental external auditors who may perform audits and attestations on an entity’s financial statements and provide reports on such audits for public review. In the UK, Canada and other Commonwealth nations Chartered Accountants and Certified General Accountants have served in that role.
For public companies listed on stock exchanges in the United States, the Sarbanes-Oxley Act (SOX) has imposed stringent requirements on external auditors in their evaluation of internal controls and financial reporting. In many countries external auditors of nationalized commercial entities are appointed by an independent government body such as the Comptroller and Auditor General. Securities and Exchange Commissions may also impose specific requirements and roles on external auditors, including strict rules to establish independence.
The objectives of an external audit are to determine:
- Whether the client’s accounting records have been prepared in accordance with the applicable accounting framework.
- The accuracy and completeness of the client’s accounting records.
- Whether the client’s financial statements present fairly its results and financial position.
Difference from internal auditor
Internal auditors who are members of a professional organization would be subject to the same code of ethics and professional code of conduct as applicable to external auditors. They differ, however, primarily in their relationship to the entities they audit. Internal auditors, though generally independent of the activities they audit, are part of the organization they audit, and report to management. Typically, internal auditors are employees of the entity, though in some cases the function may be outsourced. The internal auditor’s primary responsibility is appraising an entity’s risk management strategy and practices, management (including IT) control frameworks and governance processes. They are also responsible for the internal control procedures of an organization and the prevention of fraud.
If an external auditor detects fraud, it is their responsibility to bring it to the management’s attention and consider withdrawing from the engagement if management does not take appropriate actions. Normally, external auditors review the entity’s information technology control procedures when assessing its overall internal controls. They must also investigate any material issues raised by inquiries from professional or regulatory authorities, such as the local taxing authority.
