SEC Approves New PCAOB Quality Control Standard

The SEC approved a new Public Company Accounting Oversight Board ("PCAOB") quality control ("QC") standard.

According to the Order, new standard QC 1000 ("A Firm's System of Quality Control") supersedes existing PCAOB standards and includes two "process" elements: (i) a firm risk assessment and (ii) monitoring and remediation. The new standard "consists of six components that address aspects of the firm's organization and operations: (1) governance and leadership; (2) ethics and independence; (3) acceptance and continuation of engagements; (4) engagement performance; (5) resources; and (6) information and communication."

QC 1000 requires: 

• all PCAOB-registered firms to design a QC system that meets these standards;
• all PCAOB-registered firms to implement and operate a QC system when they lead an engagement under PCAOB standards, play a substantial role in the preparation or furnishing of an audit report or have current responsibilities under applicable professional and legal requirements regarding any such engagement;
• firms that audit more than 100 issuers annually to establish an external oversight function for the QC system, composed of one or more persons who can exercise independent judgment related to the firm's QC system; and
• firms that audit more than 100 issuers annually, to evaluate their QC system each year and report the results of their evaluation to the PCAOB on a new form (Form QC).

Statements

• Chair Gary Gensler emphasized (i) the risk-based requirements in the new standards, (ii) that they are "not one-size-fits-all," and (iii) that they hold a "firm's leadership accountable in the event of quality control shortfalls."
• Commissioner Jaime Lizárraga stated that the new standards "will help audit firms design, implement, and operate more effective QC systems."
• Commissioner Mark T. Uyeda criticized the SEC's decision not to extend the review period for the PCAOB's updated quality control standard, arguing that insufficient time was given to address public feedback, particularly on the External Quality Control Function requirement. He also expressed concerns that the "design-only" requirement (which mandates that all registered audit firms, even those not auditing issuers or broker-dealers, must design a quality control system) for all audit firms, even those without active engagements, imposes unnecessary costs without clear benefits, especially for smaller firms.
• Commissioner Caroline A. Crenshaw emphasized the importance of robust systems to ensure reliable audit reports to protect investors.
• Commissioner Hester M. Peirce opposed the standard, stating that the SEC rushed the approval process. She criticized the "design-only" requirement, calling it costly and unnecessary for smaller firms. Ms. Peirce also raised concerns about the ambiguous nature of the standard, potential conflicts with other quality control frameworks and the implementation challenges posed by the "External Quality Control Function," which she argued was introduced without sufficient public input.