Preparing for Your First External Audit

The first external audit is a milestone in a business’s development, and a daunting one for a finance team that has not been through it before. It may arrive because the company has grown past the small-company thresholds, because investors or lenders require it, or because a sale or funding round is coming. Either way, how well the business prepares shapes both the experience and the result. A prepared business goes through its first audit as a controlled process. An unprepared one faces weeks of scrambling, a larger bill and, at worst, a modified audit opinion.

This guide is written for owners, Finance Directors and Financial Controllers preparing for a first statutory audit. It covers when an audit becomes mandatory, choosing an auditor, the engagement letter, planning, the list of documents the auditor will ask for, the particular problem of opening balances, fieldwork, the management letter, a typical timetable, costs, and the people you may need. For the wider annual process, see our guides to preparing statutory accounts and audit preparation for Financial Controllers.

When an Audit Becomes Mandatory

Most UK private companies that qualify as small can claim exemption from audit. The audit requirement usually bites when a company stops qualifying as small. For financial years beginning on or after 6 April 2025, the thresholds were increased, and a company is small if it meets at least two of the three criteria below:

Four points catch businesses out:

• The two-year rule. A company usually has to exceed the limits in two consecutive years before it stops qualifying as small. That gives warning: if you breached two criteria last year and are on course to do so again, plan for an audit of this year now.
• Group position. A parent can only claim the small-company exemption if the group as a whole qualifies, and a small subsidiary in a larger group may not be exempt unless it meets specific conditions, such as a parent guarantee.
• Excluded companies. Public companies and certain regulated firms, such as banks, insurers and some investment firms, cannot claim exemption whatever their size.
• Members and stakeholders. Members holding at least 10% of the shares can require an audit. Lenders, investors, grant funders and acquirers often require one by contract even where the law does not.

The conditions are set out in the gov.uk guidance on audit exemptions for private limited companies, and the thresholds should be checked against current gov.uk guidance on annual accounts each year. FCA-regulated firms holding client money or assets may also need a separate client assets report; see CASS audit and beyond.

What an Audit Is and What to Expect

A statutory audit is an independent examination of the company’s financial statements by a registered auditor, leading to an opinion on whether they give a true and fair view and have been properly prepared under the applicable framework and the Companies Act. The auditor works to the International Standards on Auditing (UK), issued by the Financial Reporting Council. In practice that means assessing where the accounts could be materially wrong, then gathering evidence: testing transactions and balances, confirming balances with third parties, attending the stock count, and challenging the judgements behind the figures.

The business’s job is to provide the information and evidence promptly, explain the figures, and answer queries. Management remains responsible for the accounts; the auditor reports on them. That distinction matters in a first audit, because businesses sometimes expect the auditor to fix the records. They will not, and ethical standards limit how far the audit firm can help prepare the figures it is auditing.

Choosing an Auditor

Only a registered audit firm can carry out a statutory audit. Firms are registered with a recognised supervisory body — in practice the ICAEW, ACCA, ICAS or Chartered Accountants Ireland — and you can check a firm on the public audit register or, for ACCA-registered firms, through ACCA. When choosing:

• Sector experience. A firm that audits similar businesses will understand your revenue model, stock and risks, and will plan more efficiently.
• Size and fit. Match the firm to where the business is going. If a sale, listing or private equity investment is likely, a firm with a recognised name in that market can avoid a change of auditor later.
• Independence. If your current accountants prepare the accounts and tax return, ask how they would manage independence as auditor, or whether a separate firm makes more sense.
• The team. Ask who will lead the audit day to day, how continuous the team will be, and how they handle first-year audits. Our guide to the audit senior’s role explains who you will deal with most.
• Timing. Appoint before the year-end of the first audited year, so the auditor can plan and attend the year-end stock count.

For a private company, the directors can usually appoint the first auditor; thereafter the appointment is normally rolled forward each year unless the members decide otherwise. Record the appointment in board minutes.

The Engagement Letter

Before work starts, the auditor issues an engagement letter. Read it properly: it is the contract. It should set out the scope of the audit, the financial reporting framework, the responsibilities of the directors and the auditor, the expected form of the audit report, any other services (such as accounts preparation or tax), the fee basis, and what happens if the work takes longer than planned. Check in particular what the fee assumes about the state of the records and the timetable, because first-year overruns usually arise there.

Planning the Audit

The auditor will hold a planning meeting to understand the business, its systems and controls, and the areas where the accounts are most likely to be misstated. Expect questions on revenue streams, key contracts, stock, the payroll process, IT systems, related parties, financing and any significant one-off events. The auditor will set materiality — the threshold above which misstatements matter — and identify significant risks, which receive the most work.

Use the meeting to agree dates: the stock count, any interim visit, the date draft accounts and schedules will be ready, fieldwork, and the target signing date. Raise known difficult areas now. If there is a complex judgement — revenue on long contracts, a new lease, a provision — prepare a short paper setting out the treatment; our guide to writing technical accounting memos shows how. Agreeing a treatment at planning is far cheaper than arguing about it during fieldwork.

The PBC List: What the Auditor Will Ask For

The auditor will send a “prepared by client” (PBC) list of the schedules and documents they need. It varies by business, but a typical list includes:

• Final trial balance and draft statutory accounts, with a mapping between them.
• Bank reconciliations and bank statements for the year-end, plus bank confirmation authority.
• Aged sales and purchase ledgers reconciled to the control accounts, with after-date cash and invoices.
• Fixed asset register reconciled to the ledger, with invoices for additions.
• Stock count sheets, valuation and provisions for slow-moving items.
• Accruals, prepayments, deferred income and provisions schedules, with support.
• Payroll reports reconciled to the ledger and to HMRC filings; VAT returns reconciled.
• Loan agreements, lease agreements and key customer and supplier contracts.
• Board minutes, share register, related party and directors’ transaction details.
• Tax computations, and the going concern assessment with cash flow forecasts.

Prepare each schedule so it ties to the trial balance, label it clearly and put everything in one shared folder before fieldwork starts. The quality of the PBC pack largely determines how long fieldwork takes. Most of it is the output of a disciplined close; if your month-end close already produces reconciled balance sheet schedules, the year-end pack is an extension of routine work.

Opening Balances: The First-Year Problem

The issue that sets a first audit apart is opening balances. The auditor must obtain enough evidence that the balances brought forward from the unaudited prior year do not contain misstatements that affect the current year. Opening balances feed directly into this year’s profit: if opening stock is overstated, this year’s cost of sales is overstated too.

Stock is the classic difficulty. If no auditor attended last year’s count, the auditor has to find other evidence, such as roll-back testing from the current count or review of sales and margins. If they cannot get enough evidence, they may have to modify the audit opinion on the profit and loss account and cash flows, even where this year’s closing balance sheet is fine. Debtors, creditors, accruals and fixed assets brought forward are tested too, usually by checking subsequent cash movements and underlying documents.

To reduce the risk:

• Appoint the auditor early, and where possible before the start of the first audited year, so they can observe the opening stock count.
• Keep full count sheets, valuations and reconciliations for the prior year-end.
• Review the prior-year balance sheet critically before the auditor does, and correct genuine errors properly, as prior-period adjustments where material.
• Expect the audit report to note that the comparative figures were not audited.

Fieldwork and Working With the Auditor

Fieldwork is the main period of testing, on site, remote or both. The audit team will select samples, request invoices and contracts, send confirmations to banks and sometimes customers, recalculate balances and raise queries. Name one person to coordinate requests, keep a shared query log with owners and dates, and aim to answer queries within a day or two. Slow responses stretch fieldwork, and stretched fieldwork costs money.

Be open. If you know of an error or weakness, tell the auditor rather than hoping it goes unnoticed; an auditor who discovers concealed problems loses confidence in everything else. Expect proposed adjustments: a first audit almost always produces some. Agree them on the evidence, understand why they arose, and fix the process behind them. Our guide to managing the year-end audit relationship covers this in more depth.

At the end, the directors approve the accounts and sign a letter of representation confirming, among other things, that they have provided all relevant information. The auditor then signs the report, dated on or after the directors’ approval, and the accounts are filed at Companies House — for a private company, within nine months of the year-end.

The Management Letter

After the audit, the auditor reports to the directors on deficiencies in internal control and other matters found during the work, often in a management letter. In a first audit it can be long. Typical points include missing reconciliations, weak segregation of duties, unapproved journals, poor contract records, IT access issues and late cut-off. Treat it as a free diagnostic. Assign an owner and deadline to each point, report progress to the board, and expect the auditor to follow up next year. Our guide to internal controls for growing businesses covers the usual fixes.

A Typical First-Audit Timetable

Timings vary with size and complexity, but a typical first audit for a private company runs like this, measured from the financial year-end:

Lenders and investors often want audited accounts well before the statutory deadline, so build the plan back from the earliest date anyone needs them. Our year-end statutory accounts timetable breaks the close down week by week.

What a First Audit Costs

There is no standard fee: it depends on scope. The main drivers are the size and complexity of the business, the number of entities, stock and revenue complexity, the number of locations, the extra opening-balance work in a first year, and above all the state of the records. Ask for a written quote that sets out its assumptions, and ask how the firm charges for extra time if those assumptions are not met. The most controllable cost is overrun: an auditor waiting for missing schedules, or re-performing reconciliations, is time you pay for.

Budget, too, for internal cost: the finance team’s time, and any interim support (our guide to interim Financial Controller rates gives current market ranges). For many businesses, that internal investment is what keeps the external bill under control.

Hiring for Audit Readiness

A business facing its first audit often finds that its finance function was built for bookkeeping and management accounts, not for audit. The common gap is someone who has been through audits before and can produce statutory-standard schedules, document judgements and manage the auditor. There are three usual routes:

• A permanent financial accountant or Financial Controller, where the business has outgrown its current team for good. See hiring a financial accountant for your first audit and our Financial Controller recruitment service.
• An interim Financial Controller or financial accountant for the months either side of the year-end, to get the records audit-ready and see the audit through. See interim Financial Controllers for audit preparation.
• A fractional Financial Controller a day or two a week, where the business needs ongoing senior oversight but not a full-time hire.

Where the first audit coincides with investment or a planned sale and the business needs a Finance Director or CFO, our sister firm FD Capital handles those searches. Hire early: someone who arrives three weeks before fieldwork can only firefight.

After the First Audit

The first audit is the hardest. Hold a short review with the finance team and the auditor: what caused delay, which schedules were weak, which adjustments arose and why. Act on the management letter, keep the PBC pack as next year’s template, and second-year audits are usually noticeably smoother, with opening balances now audited.

Frequently Asked Questions

Can our existing accountants audit us?

Only if they are a registered audit firm, and subject to ethical standards on independence, particularly if they also prepare your accounts. Ask them directly how they would manage it.

What happens if the auditor cannot verify opening stock?

They will try alternative procedures. If those do not give enough evidence, the audit opinion may be modified for the effect on the year’s results, even where the closing balance sheet is fine.

How long does a first audit take?

From planning to signing, usually several months, with fieldwork itself often running one to three weeks for a single-entity private company. The state of the records is the biggest variable.

Do we need an audit if we are just over one threshold?

Not necessarily. A company is small if it meets two of the three criteria, and usually only stops qualifying after two consecutive years over the limits.