Statutory Auditing is an audit required by legislation or another legally binding regulatory requirement. The defining feature is not merely that the audit is performed externally, but that a law or regulation establishes the requirement for the audit and typically specifies relevant eligibility, scope, reporting or filing requirements. The precise meaning varies between jurisdictions because statutory audit regimes are created by national or sector-specific legislation.
In the United Kingdom, for example, statutory audit requirements for companies are principally established through company legislation and related regulations, with exemptions and special rules applying according to circumstances. Consequently, whether an entity requires a statutory audit cannot be determined from the term alone without considering the applicable legal framework.
A statutory audit normally involves an auditor examining financial statements and reporting whether they give the required level of assurance under the applicable accounting and auditing framework. The statutory framework can determine which entities must appoint auditors, what qualifications or registration auditors require, how auditors are appointed and removed, and what reports or filings are required. Different sectors can have additional statutory regimes, so companies, financial institutions, charities, public bodies and regulated entities may face different audit obligations. Legal thresholds can also change over time, making current legislation essential when determining whether an audit is mandatory.
The relationship between Statutory Auditing and financial reporting is important because the auditor’s opinion is generally connected to financial statements prepared by management. Management remains responsible for the preparation of the financial statements and for maintaining appropriate accounting records and controls. The statutory auditor independently evaluates the statements and supporting evidence in accordance with applicable auditing standards. The auditor’s report therefore does not transfer responsibility for the accounts from directors or management to the auditor. This distinction is particularly important when interpreting audit findings, because an audit opinion is an independent conclusion about the reported financial information rather than a replacement for management’s responsibility.
Statutory Auditing provides a formal accountability mechanism in environments where legislation considers independent assurance necessary. The users of statutory financial statements can include shareholders, lenders, regulators, employees, suppliers and other stakeholders, although the intended users and legal purposes vary. Mandatory audit requirements can reduce information asymmetry between those responsible for running an entity and those relying on its financial reporting. The statutory requirement also establishes a minimum governance framework for entities within its scope. However, statutory audit does not mean that every operational activity or every transaction receives exhaustive examination; the audit remains subject to professional standards, materiality, sampling and inherent limitations.
The legal nature of Statutory Auditing creates particular requirements around auditor appointment, independence, reporting and professional qualification. Auditors may need to be registered with an appropriate professional or regulatory authority and must comply with relevant ethical and technical standards. Certain entities can face enhanced requirements because of public interest, regulatory significance or size. Statutory regimes can also provide exemptions for smaller entities or entities meeting prescribed conditions. Such exemptions are jurisdiction-specific and can change as legislation develops, so historical assumptions about audit requirements may become inaccurate.
Statutory Auditing differs from voluntary external auditing because the former is imposed by law while the latter is commissioned without a statutory obligation. A company exempt from mandatory audit could nevertheless choose to obtain an external audit because lenders, investors, owners or other stakeholders require or value independent assurance. Statutory Auditing also differs from Internal Auditing, which is an internal assurance function and is generally not the same legal mechanism as an externally mandated financial statement audit. Statutory audit should therefore be understood as a legal status of the audit requirement rather than simply another name for every external audit.
The scope and procedures of a statutory audit are influenced by applicable auditing standards as well as the legal framework. Auditors typically assess risks of material misstatement, obtain evidence, evaluate accounting policies and estimates, perform analytical and substantive procedures and consider relevant internal controls. Where the auditor cannot obtain sufficient appropriate evidence or identifies material misstatement, the report may need to be modified according to the circumstances. Statutory reporting can also include matters required by legislation that go beyond the basic opinion, depending on the entity and jurisdiction.
Statutory Auditing has practical consequences for governance, finance and compliance because entities subject to the regime must plan for auditor appointment, audit readiness, evidence provision and reporting deadlines. Audit costs and administrative demands are significant considerations, particularly for smaller entities, but the statutory framework establishes the assurance requirement independently of management preference. Common misconceptions include assuming that a statutory audit certifies that an organisation is free of fraud, guarantees solvency or confirms that every accounting entry is correct. In reality, statutory audit provides a defined level of independent assurance subject to materiality, evidence limitations, professional judgement and the precise requirements of the applicable law and auditing standards.