Stewardship and Auditing of Limited Companies

In a limited company the shareholders own the business but the directors manage it — ownership is separated from control. The directors therefore act as stewards (agents) of the shareholders, entrusted with their investment, and are accountable for how they use the company's resources. They discharge this accountability mainly by preparing the annual financial statements (their stewardship report) and presenting them to shareholders at the annual general meeting, where shareholders can question them and vote.

The external auditor independently examines the financial statements prepared by the directors and expresses an opinion on whether they give a true and fair view and comply with accounting standards and the law. The auditor is appointed by, and reports to, the shareholders — adding credibility to the directors' accounts.

Qualified opinion — 'except for' a specific issue, the accounts give a true and fair view (the problem is material but not pervasive). Adverse opinion — the accounts do not give a true and fair view (the problem is material and pervasive). (A disclaimer of opinion — the auditor cannot obtain enough evidence to form any opinion — is also valid.)

An external audit gives only reasonable assurance, not a guarantee, that the financial statements are free from material misstatement. It is based on sampling and testing rather than checking every transaction, and relies on professional judgement and the evidence available. Critically, it is not designed to detect all fraud — preventing and detecting fraud is the directors' responsibility through internal controls.

The expectation gap is the difference between what users believe an audit provides — often assuming a clean report guarantees the accounts are correct, the company is well-run and there is no fraud — and what an audit actually provides, namely reasonable assurance on whether the accounts are true and fair. This gap can lead users to place too much reliance on the audit report.

Internal audit is an in-house function (or outsourced for management) that reviews the company's internal controls, risk management and operations, reporting to management or the audit committee on an ongoing basis to help directors run the company effectively.

External audit is carried out by an independent firm, appointed by the shareholders, to express an opinion on whether the financial statements give a true and fair view, reporting to the shareholders (usually annually).

So they differ in who appoints them (management vs shareholders), whom they report to, their focus (controls/operations vs the financial statements) and their independence (in-house vs independent).

The agency problem arises because the directors (agents) manage resources belonging to the shareholders (principals), but the two may have different interests. Directors might act in their own interests — paying themselves high salaries, awarding generous perks, or pursuing empire-building — rather than maximising shareholder value, and they control the information shareholders receive.

An external audit helps by providing shareholders with an independent opinion on whether the directors' financial statements are true and fair, adding credibility and making it harder for directors to mislead the owners about their stewardship.

Corporate governance — the system by which companies are directed and controlled — adds further safeguards: non-executive directors give independent oversight of the executives; an audit committee oversees financial reporting and the auditors; separating the chair and chief executive prevents excessive power in one person; and transparent reporting and performance-linked remuneration align directors with shareholders. Together, audit and governance reduce the agency problem by improving accountability and transparency, though they cannot eliminate it entirely.

Internal controls are systems established by the directors to safeguard the company's assets, ensure the accounting records are reliable and accurate, promote operational efficiency, and help prevent and detect fraud and error. Three examples are: segregation of duties (so that no single person controls a whole transaction, e.g. ordering, receiving and paying); authorisation limits (payments or purchases above a set amount must be approved by a senior person); and regular reconciliations (e.g. bank reconciliations to check the records agree with independent evidence).

Corporate governance is the system by which companies are directed and controlled in the interests of their shareholders and other stakeholders. Two examples of good practice are: appointing independent non-executive directors to provide objective oversight of the executive directors; and establishing an audit committee (largely of non-executives) to oversee financial reporting and the relationship with the external auditors. (Separating the roles of chair and chief executive, and transparent disclosure, are also valid.)

The argument misunderstands what an audit provides — an example of the expectation gap.

A clean (unmodified) opinion states only that, in the auditor's judgement, the financial statements give a true and fair view and are free from material misstatement, based on reasonable assurance. It does not mean the accounts are 100% correct: the audit uses sampling, relies on judgement, and targets material items, so some errors or smaller frauds may go undetected.

Importantly, an audit is not designed to assess how well the company is managed — that is a matter of strategy and performance, outside the audit's scope — and detecting and preventing fraud is primarily the directors' responsibility through internal controls, not the auditor's.

Evaluation: a clean report is reassuring about the reliability of the accounts and is valuable to shareholders, but it is not a guarantee of good management or freedom from fraud. The shareholder should also consider the company's performance (ratios, cash flows) and its governance and controls before drawing such conclusions.

The financial statements are prepared by the directors, whose stewardship is being assessed, so they have an interest in how the accounts appear. To give an independent check on the directors, the shareholders appoint the auditor, ensuring the auditor is independent of management and reports to the owners on whether the directors' accounts are true and fair — strengthening the auditor's objectivity and the accounts' credibility.