1. Full transparency of the rating scale
The criteria for each grade of the audit-file rating scale (1–4) should be public and known to those inspected in advance, as should the aggregate rating results.
- Why
- In 2025, deficiencies were found in the files of 266 of 271 inspected audits, and in 2024 in all 272. If findings appear in almost every inspection, the rating is decided by the criteria used to weigh them. An inspected auditor who does not know these criteria does not know what to improve, and the profession cannot check whether ratings are consistent.
- Model
- The UK Financial Reporting Council rates inspected audits on a four-grade scale. It publishes a description of each grade, from “good” to “significant improvements required”, together with aggregate results.
2. A measure for firm-wide procedures too — separating formal shortcomings from substantive ones
Findings on a firm’s procedures and its system of quality management should be weighed against public criteria. These criteria should distinguish shortcomings in the documentation of procedures from defects that genuinely affect audit quality. A gap in quality-management documentation and a wrong opinion on financial statements are not of the same weight and should not lead to the same consequences.
- Why
- Audit files are rated on a scale from 1 to 4, while a firm’s procedures have no measure other than a list of alleged breaches. Yet procedures make up a growing share of inspection findings: from 28.7% in 2022 to 60.7% in 2025. Without a measure it is impossible to tell which of these findings matter for audit quality and which concern documentation only.
3. Protecting professional judgement from being replaced by the inspector’s judgement
The inspection checks whether the auditor applied professional judgement, documented it adequately and stayed within the limits set by the standard. A different view taken by the inspector within those limits is not a breach.
- Why
- ISA 200 requires professional judgement throughout the audit, and ISA 330 and ISA 500 leave the nature, timing and extent of procedures to the auditor in line with the assessed risk. Using a discretion granted by a standard cannot be a breach of that same standard.