What it means
Most listed companies are required to have one, and the composition rules are deliberately strict. Members must be non-executive and independent, meaning they hold no management role and no relationship that could compromise their judgement, and at least one is expected to have recent and relevant financial expertise.
Three to five members is typical, and the chief financial officer attends by invitation rather than as a member. The committee's core work sits in four areas: reviewing the financial statements before the board approves them, overseeing internal controls and risk management, recommending the appointment and fee of the external auditor, and monitoring the internal audit function.
It does not prepare the accounts and it does not run the business. Its job is to ask the questions a well-informed sceptic would ask.
Independence is protected by structure as well as by rules. The committee meets the external auditors privately without management present at least once a year, which gives the auditors somewhere to raise concerns they would rather not raise across a table from the finance director.
Many committees also own the whistleblowing channel for the same reason. In practice the committee spends most of its time on judgements rather than arithmetic.
Revenue recognition on long contracts, provisions for warranty or litigation, impairment of goodwill and going concern assumptions are all areas where reasonable people can reach very different numbers. A good committee asks how the number was derived, what the alternatives were and why management chose this one.
The rhythm of the work is fairly predictable. Four to six meetings a year is common, timed around the half-year and full-year reporting cycle, with papers circulated a week in advance and a private session with both internal and external auditors on the agenda.
Chairs who insist on early papers and clear one-page summaries tend to run better committees than those who accept a hundred pages the night before. Smaller and private organisations often run a lighter version of the same idea, and it is usually worth doing.
A charity or a family business might combine audit with risk in one committee, or ask two independent trustees to review the accounts before the board signs them. The formality scales down; the principle of independent challenge should not.
In practice
Real-world examples
Example 1
A listed engineering group recognises revenue on multi-year infrastructure contracts using estimated stage of completion. The audit committee challenges why one contract's margin has been held flat despite three cost overruns, and the finance team revises the forecast, reducing reported profit by $4,200,000 before publication. The auditors later cite the challenge as evidence that oversight is working.
Example 2
A national charity's audit committee reviews the treatment of a $6,000,000 restricted grant that the finance team had recognised in full on receipt. The committee questions whether the conditions attached had actually been met, and the income is deferred across two years instead. Trustees avoid an awkward conversation with the funder.
Example 3
A private equity backed retailer preparing for a listing forms an audit committee eighteen months ahead of time, appointing two independent non-executive directors. They spend the first year building an internal audit function and tightening the month-end close from twenty-one days to nine. By the time the bankers arrive, the reporting is credible.
Think of it
Think of an audit committee like the crew of a ship who are responsible for checking the ship's navigation systems and ensuring all maps are accurate, so the ship sails smoothly and safely.
Case study
Seen in the real world
Ardent Utilities Group is an illustrative, fictional water and waste business created to show what an audit committee actually changes. For several years its committee met twice a year, received board papers the day before, and approved the accounts after a discussion that rarely ran past forty minutes. Nothing went visibly wrong, which is exactly why nobody pushed for more.
A new committee chair, a former finance director from another sector, changed three things: meetings moved to five a year, papers had to arrive seven days ahead with a one-page summary of every significant judgement, and each meeting ended with a private session with the auditors. In the first year the committee sent back the goodwill impairment paper twice because the growth assumptions in the model were higher than anything the business had achieved in a decade.
The eventual write-down was $18,000,000, which was uncomfortable, but it happened on the company's own timetable rather than after an auditor's challenge or a regulatory review. This fictional example illustrates the real function of the committee: it does not find every problem, but it makes it much harder for an inconvenient one to go unexamined.
Watch out
Common mistakes
- Treating the audit committee as a rubber stamp on management's numbers. Its whole value comes from independent challenge, and a committee that never sends anything back is not doing its job.
- Appointing the finance director as a member. The chief financial officer should attend and answer questions but cannot be a member, because members must be independent non-executives.
- Assuming the committee is responsible for detecting fraud. It oversees the systems and the auditors, while management retains primary responsibility for preventing and detecting fraud.
Questions
People also ask
Who sits on an audit committee?
Independent non-executive directors only, with at least one member expected to have recent and relevant financial experience.
How often should it meet?
Four to six times a year is typical for a listed company, aligned with the reporting calendar and including private sessions with the auditors.
Do private companies need one?
Not usually as a legal requirement, though many form one voluntarily when they take on external investors, significant debt or are preparing for a sale.