Direct answer first: an audit is an independent check of your financial statements — the auditor tests whether the numbers trace to documents, whether revenue and liabilities are complete, and whether the balance sheet reconciles to reality — and it ends with an opinion about whether the statements can be relied on. The preparation that actually works is the year that preceded it: books that were closed monthly, reconciled, and traceable make the audit a routine; books that were reconstructed make it an archaeology project. This guide explains what the auditor does, what they look for, and how to make the first audit boring — which is the goal.
What the auditor actually does
Most first-time founders expect an audit to be a suspicion event — someone hunting for fraud in their numbers. The reality is more useful and less dramatic. The auditor is an independent professional whose job is to gather enough evidence to form an opinion on the financial statements: do they present the business fairly, in all material respects? The opinion has four practical mechanics, and understanding them removes most of the fear:
- Independence is the point. The auditor cannot be the same team that prepared the statements — the check only means something if the checker is separate. This is why the audit is never "our accountant audits us"; it is an independent firm examining the work.
- Evidence, not suspicion. The auditor tests: they sample transactions and trace them to documents, they check that recorded revenue has a real invoice behind it, they confirm balances with banks and counterparties, they test whether the controls described actually run. The work is sampling and testing, not interrogation.
- Materiality governs attention. Auditors do not check every transaction — they check what could change a reader's decision. Small errors below the materiality threshold are noted, not fought over; the audit concentrates where the numbers could mislead.
- The output is an opinion, not a verdict. The audit ends with a written opinion: unmodified (clean), or modified (qualified — with reservations), or — in the worst case — adverse or a disclaimer. Most businesses get clean opinions; the ones that do not usually saw the issues coming for years.
What the auditor looks for
Strip the jargon and the auditor tests four things, in four families:
- Traceability. Numbers trace to documents. The revenue in the statements matches the invoices; the expenses match the receipts; the payroll matches the employment records. The one-step test — any number to its paper in one step — is precisely what this family checks.
- Completeness. Nothing material is missing. Revenue that was earned is recorded; liabilities that exist are on the balance sheet; commitments and guarantees are disclosed. The completeness family is where the auditor's professional scepticism lives: recorded things are checked, but unrecorded things are hunted.
- Supportability of judgement. The areas where the business had to decide — depreciation lives, provisions, revenue recognition timing, the valuation of anything estimated — are supported by documented reasoning. Auditors do not need the judgement to be their preferred one; they need it to be a reasonable one with a paper trail.
- Reconciliation to reality. The balance sheet agrees with the bank statements, the ledgers agree with the sub-ledgers, and the statements agree with the records. Every reconciliation the business skipped during the year is a finding waiting to be found — the auditor is the person the skipped reconciliations were borrowed from.
The four families have one common property: every one of them is a property of the books, not of the business. The audit does not evaluate whether the business made money; it evaluates whether the statements can be believed. That is why preparation is a records question.
The preparation that actually works
The preparation for an audit is a year long, and it is the same year that good accounting already is. What the auditor will find is decided by the habits of the twelve months before the check — not by the two weeks before it. The preparation that actually works, in order:
- Close monthly, every month. The monthly close is the audit preparation. The reconciliations, the adjustments, the reviews — every month of the close is a month of evidence assembled. A business that closed twelve months has done 80% of the audit before it started.
- Run the one-step test on the records. Any number in the statements must trace to its document in one step — filed invoices, filed receipts, filed contracts. The records structure (one home per family, filing at the event) is the audit's roadmap.
- Assemble the information pack before the audit starts. The auditor will ask for a standard list: trial balance, ledgers, bank confirmations, contracts above the threshold, board minutes, the schedule of fixed assets, and the prior-year statements. Assembling the pack in advance is the difference between an audit that starts on day one and one that starts two weeks in.
- Prepare the owners and the team. The audit needs the owner's time for the interviews (revenue recognition, related parties, litigation awareness) and the team's time for the document requests. Scheduling that time honestly is part of preparation; the audits that run long are the ones where the responses arrive drip by drip.
- Review the judgement areas in advance. The depreciation policy, the provisions, the cut-off choices — walk through them with the preparer before the auditor arrives, so the reasoning is documented and consistent, not improvised under a question.
Common first-audit findings
First audits produce a predictable short list of findings, and knowing them in advance means fixing them before they are found:
| Finding | Why it happens | Why it matters |
|---|---|---|
| Unreconciled accounts | The second bank account or card that was never matched to the books | Undermines the balance sheet; the auditor must extend procedures |
| Cut-off issues | Revenue or expenses recorded in the wrong period around year-end | Distorts the year's profit; the classic restatement trigger |
| Missing documents | Numbers in the books whose paper has evaporated | Forces alternative procedures — expensive, and the finding survives |
| Undocumented judgements | Depreciation or provision choices made without a written policy | Not wrong — unverifiable; the auditor asks for what was never written |
| Related-party gaps | Transactions with owners or their other businesses undisclosed | Disclosure matters as much as amount; omission is a finding in itself |
Read the table and the pattern is the same as everywhere in this site: the findings are records and timing failures, not fraud. The fixes are the monthly close, the one-step test, and written policies — none of them exotic, all of them installed by the year, not the two weeks.
The day-one checklist
This is the pack the auditor will ask for — assemble it before the audit starts, and the first day becomes a briefing instead of a scavenger hunt:
The rule for the pack is the one-step test applied to the audit: if the auditor asks for a document, you can produce it in one step from its family. That is the whole preparation, in one rule.
What a review is (and is not)
Not every engagement is a full audit, and the difference matters — because founders pay for one and receive the other, or worry about one when they need the other:
- The full audit tests evidence, samples transactions, and confirms balances with third parties. It expresses a high level of assurance: the statements can be relied on. It is what lenders, investors, and regulations ask for when they ask for an audit.
- The review uses limited procedures — enquiries with management and analytical checks against expectations — and expresses limited assurance: nothing came to attention that suggests the statements are wrong. It is cheaper, faster, and the honest fit for many smaller engagements where a full audit would be disproportionate.
- Compilation is not an assurance service at all — the accountant assembles the statements from the books without testing them. It is paperwork, not a check, and founders who believe they were audited when they were compiled have bought a false sense of assurance.
Which one applies to you is decided by your stakeholders and your jurisdiction — the bank's covenant, the investor's agreement, the law's threshold. The honest rule: know which service you are buying, because the three answers to "is our number right?" are not interchangeable, and neither are their prices.
Making the first audit cheap
The audit fee is driven by the auditor's risk and the work required — and both are driven by the records, not by the business's size. Three things make the first audit dramatically cheaper:
- The information pack arrives complete on day one. The auditor's start-up time is the fee's fattest component; a complete pack cuts it to a morning.
- The books close and reconcile. An auditor facing a trial balance that reconciles to the bank in one pass is an auditor with low risk — and low-risk audits get done fast and priced accordingly.
- The judgement areas have policies. Written depreciation and provision policies mean the audit's questions get answered from a file, not from memory.
The businesses that "can't afford an audit" are usually the ones that made the audit expensive by deferring the work into it. The businesses that treat the audit as the annual exam of a year-round discipline find it is the cheapest assurance they buy. Our guide to business records is the evidence layer the audit reads, and the monthly close checklist is the year-round preparation that makes it boring.
The bottom line
An audit is an independent check of whether your statements can be believed — traceability, completeness, supportability, and reconciliation, ending in an opinion. The preparation is the year that preceded it: monthly closes, one-step records, written policies, and an information pack assembled before the auditor arrives. Do that, and the first audit is a routine; do the opposite, and it is the most expensive exam of your business's life — with the answers already written in the books.
