What it means
Every attest engagement involves three parties: management, who assert something; the practitioner, who evaluates that assertion against stated criteria; and a third party, who relies on the resulting report. The accountant does not prepare the information being tested, which is precisely why the conclusion carries weight with outsiders.
Investors, lenders and regulators cannot walk into a company and inspect its ledgers, so they need someone who can do it on their behalf. The attest function is what converts internally prepared numbers into information a bank is willing to lend against or a buyer is willing to price.
Assurance comes in levels, and the level chosen drives both the amount of work and the fee. An audit gives reasonable assurance and a positive opinion that the statements present fairly; a review gives limited assurance expressed negatively, saying nothing came to the accountant's attention; an agreed-upon procedures engagement reports factual findings with no conclusion at all.
A compilation, where the accountant simply assembles figures management supplies, sits deliberately outside the attest function because no assurance is given. Knowing which service you have bought matters enormously, since many commercial disputes begin when a lender assumed an audit and received something much lighter.
Independence rules are the backbone of the whole arrangement, which is why a firm cannot attest to work it produced itself. The scope has widened well beyond financial statements to service organisation control reports, greenhouse gas inventories and grant compliance, all built on the same three-party structure.
In practice
Real-world examples.
Example
A regional brewery applies for a $4,000,000 expansion loan. The bank will not accept management-prepared accounts, so it requires an audited set signed by an independent firm. The attest function here is the audit opinion that allows the credit committee to treat the numbers as reliable rather than as a sales pitch.
Example
A payroll software company that holds sensitive client data is asked by three enterprise customers for evidence that its controls actually work. Rather than hosting three separate customer inspections, it engages an accounting firm to examine its control descriptions and issue a service organisation control report. One attest report then satisfies every customer who asks the same question.
Example
A charity receives a $900,000 government grant that requires proof the money went on eligible costs. Its accountant performs an agreed-upon procedures engagement, testing each claimed cost against the grant terms and listing exceptions. The funder gets independent findings without the charity paying for a full audit.
Case study
Seen in the real world.
Halden Freight Group is a fictional haulage business used here purely as an illustration. After ten years of management-prepared accounts, Halden wanted to sell a 30% stake to an outside investor, who refused to negotiate on unaudited figures. Halden's finance director argued that nobody had ever questioned the numbers, but the investor's objection was structural rather than personal: no independent party had ever tested them.
Halden engaged an accounting firm for its first audit. The work surfaced two issues. Revenue on multi-month contracts had been recognised at invoice date rather than as the work was delivered, and a group of trailers still carried on the books had in reality been scrapped years earlier. The restated accounts showed lower profit but a cleaner balance sheet, and the investor completed the deal at a modestly reduced price. The attest function did not make Halden more valuable; it made Halden's claims checkable, which is what allowed a transaction to happen at all.
Watch out
Common mistakes.
- Treating any work an accountant does as an audit. Bookkeeping, tax return preparation and compilations involve no attest function whatsoever and carry no assurance, however impressive the letterhead looks.
- Assuming an attest report guarantees the numbers are exactly right. An audit provides reasonable rather than absolute assurance and is planned around materiality, so small errors can and do survive it.
- Asking the firm that built your management accounts to attest to them. That destroys independence and usually voids the value of the report for the very lender or investor who requested it.
Questions
People also ask.
Does the attest function apply only to financial statements?
No, it applies to any subject matter with suitable measurable criteria, including control effectiveness, emissions data, royalty calculations and grant compliance.
Who pays for it, and does that compromise independence?
The company being examined pays, which is exactly why professional independence rules, partner rotation and external quality review exist to counterbalance the obvious conflict.
What is the cheapest attest service that still satisfies a lender?
A review is frequently accepted for smaller facilities and typically costs a fraction of an audit, but you should get the requirement confirmed in writing before commissioning any work.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related