PCAOB Adopts New Rules to Shine a Light on Audit Firms & Boost Investor Confidence

The Public Company Accounting Oversight Board (PCAOB) has recently approved sweeping new requirements to standardize how audit firms report key metrics. These updates, coupled with a modernization of the PCAOB’s reporting framework, aim to enhance transparency, bolster investor confidence, and improve audit quality.

PCAOB Chair Erica Y. Williams summed up the intent of these changes with a clear message, “Sound and consistent information strengthens investor confidence and can drive audit quality. The new requirements will make PCAOB oversight more effective and equip investors, audit committees, and others with clear, consistent, and actionable data related to audit firms and the engagements they perform.”

Under the new rules, audit firms that handle accounts for accelerated or large accelerated filers must report standardized metrics in eight categories:

• How much involvement partners and managers have in audits
• The workload distribution among staff
• Training hours for audit personnel
• The experience levels of team members
• Their industry expertise
• Retention rates (at the firm level)
• How audit hours are allocated
• The firm's history with financial restatements

These metrics aren’t just numbers for the sake of reporting—they’re designed to help investors, audit committees, and regulators better understand how audits are performed and assess the quality of these crucial services.

Firms will submit this data via two updated forms:

• Form FM (Firm Metrics): A new annual report focusing on firm-level metrics.
• Revised Form AP (Audit Participants and Metrics): Engagement-specific data for audits of major filers, now allowing firms to include narrative disclosures to provide context.

A Gradual Rollout, Tailored for Flexibility

Acknowledging that some firms may need time to adjust, the PCAOB is rolling out these changes in stages. Firms auditing more than 100 issuers will comply first, with the remaining firms following a year later. The earliest deadline for firm-level metrics is October 1, 2027, with initial reports due by September 30, 2028.

The PCAOB didn’t stop at metrics. Its updates to the reporting framework aim to bring clarity and depth to the information audit firms must share. Highlights include:

• Financial Transparency: Firms will report additional fee information, with large firms submitting financial statements confidentially.
• Governance Overhaul: Audit firms will now disclose more about their leadership, structure, and key quality control roles.
• Network Dynamics: Firms must detail their relationships with networks, including shared resources and audit oversight practices.
• Cybersecurity Focus: Significant cybersecurity incidents must be confidentially reported, while firms will also publicly share how they manage cybersecurity risks.
• Quality Control Updates: Registered firms must submit updated quality control policies aligned with PCAOB’s revised standards by December 2025.

After the April 2024 proposal, the PCAOB received a flood of comments from stakeholders. The feedback wasn’t ignored; it directly shaped the final rules. Metrics were trimmed from 11 categories to eight, calculation methods were clarified, and reporting requirements were streamlined to minimize burden—especially for smaller firms.

The PCAOB also upped the character limit for optional narrative disclosures from 500 to 1,000, giving firms more room to explain their numbers and provide meaningful context.

Why This Matters for Audit Committees, Investors, & Compliance Pros

For those in the trenches of compliance and internal audit, these changes are more than regulatory housekeeping. The new disclosures offer a wealth of data that could reshape how audit committees evaluate their auditors and how firms manage their operations.

The focus on governance, quality control, and cybersecurity is particularly noteworthy. These are areas where compliance and ethics professionals play a critical role, and the enhanced reporting requirements could drive meaningful improvements in accountability and risk management.

While the new rules still need a green light from the SEC, the PCAOB is wasting no time preparing resources to help firms implement them. For the auditing world, this marks the beginning of a new era—one where transparency isn’t just a buzzword but a foundational principle.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.