Introduction

In July 2025, the PCAOB sanctioned a U.S.-based accounting firm for repeated engagement quality review (EQR) failures across 17 broker-dealer audits. The firm was fined $50,000, censured, and ordered to implement systemic quality control reforms and certify compliance within 120 days. While enforcement addresses past non-compliance, the true test lies in how effectively the firm utilizes remediation to establish and maintain lasting audit quality.

Breakdown in Engagement Quality Review and Systemic Control Failures

According to PCAOB Release No. 105-2025-026, the firm repeatedly designated a senior manager, who reported directly to the engagement partner, as the engagement quality reviewer. This violated AS 1220, which requires that the reviewer be a partner or equivalent and independent of the audit team. Additionally, the firm lacked a system of quality control sufficient to ensure compliance with applicable standards, in breach of QC Section 20. These failures occurred across 17 engagements, signaling broader deficiencies in governance and oversight.

Remediation Requirements and Timelines Under the PCAOB Order

To address these deficiencies, the PCAOB imposed the following remedial timeline:

Failure to comply may constitute a violation of PCAOB Rule 5000 and could trigger further enforcement action.

Addressing the Root Cause: More Than Policy Fixes

Meeting these deadlines is necessary, but insufficient. Effective remediation requires a thorough analysis of the underlying causes of the breakdown.

Was the failure due to a technical misunderstanding, or did it stem from compromised independence resulting from the organizational structure?

Firms must confront uncomfortable questions:

• Are our EQR reviewers truly independent within the firm’s reporting structure?
• Have we eliminated quality control bottlenecks in smaller or resource-constrained offices?
• Does our culture empower individuals to challenge dominant partners and uphold professional skepticism?

If the answer is “no,” superficial fixes may mask underlying risks, leaving the firm vulnerable to repeat findings.

Building a Sustainable Remediation Plan

To ensure remediation delivers more than short-term compliance, firms should consider the following:

1. Restructure Reviewer Independence
   EQR reviewers must not be subordinate to engagement partners. Consider rotating reviewers across offices, establishing centralized quality committees, or utilizing qualified external reviewers as needed to ensure consistency and quality.
2. Reinforce Training on AS 1220
   Conduct mandatory sessions for partners and senior staff focused on the independence requirements and responsibilities of EQRs.
3. Implement Monitoring and Escalation Mechanisms
   Track reviewer assignments and implement a mechanism for escalating conflicts of interest or breakdowns in independence.
4. Document All Reforms and Supporting Evidence
   Maintain detailed records of revised policies, reviewer assignments, approval protocols, and internal communication to demonstrate compliance and enable transparent certification.

What the PCAOB Requires and How Oversight Is Maintained

The PCAOB requires firms to submit a narrative certification and supporting evidence within 120 days of the order. Although the Board does not routinely publish follow-up reports, it may request additional information or take further action if the remediation is deemed incomplete.

Thus, remediation is both an external mandate and an internal responsibility, and firms must treat it accordingly.

A Cultural Shift from the Inside Out

Effective remediation is not simply about adjusting policies—it requires a cultural shift. If EQR continues to be viewed as a procedural formality, structural improvements will fall short. Sustainable change begins with reinforcing openness, accountability, and a quality-first mindset throughout the organization.

Checklist: Strengthening EQR Compliance

• The reviewer is a partner or equivalent, as required under AS 1220.03.
• The reviewer is not part of the engagement team and has had no significant involvement in the audit.
• The reviewer is organizationally independent from the engagement partner and team.
• The reviewer’s performance evaluations, compensation, and advancement are not controlled by the engagement partner.
• The reviewer has completed recent training specific to EQR roles, responsibilities, and independence requirements (within the past 12 months).
• The EQR includes an objective evaluation of significant judgments and conclusions reached by the engagement team.
• The concurring approval of issuance is obtained prior to report release, in accordance with AS 1220.18C.
• Review findings and approvals are formally documented and securely retained within the audit file.
• Reviewer assignments are approved, tracked, and monitored by a quality control or risk oversight function.
• A clear and independent escalation mechanism exists for reviewer concerns, separate from the engagement chain of command.
• The firm’s EQR policies and procedures have been updated post-sanction and formally approved by senior leadership or the governance body.
• A centralized register of reviewer assignments and EQR approvals is maintained to monitor compliance trends.
• A detailed narrative and verifiable documentation supports the firm’s remediation certification to the PCAOB.
• Ongoing internal monitoring or peer reviews are in place to periodically assess the quality and independence of EQRs.

KNAV Comments

Sanctions may draw attention to non-compliance, but it is the remediation journey that defines whether a firm improves or repeats its mistakes. What appears to be a regulatory deadline should be viewed as a strategic opportunity to enhance independence, rebuild trust, and establish a lasting culture of audit quality.

Share via