PCAOB relaxes QC 1000 quality control standard

The Public Company Accounting Oversight Board voted to adopt a set of amendments Wednesday that will ease the requirements of its QC 1000 quality control standard for auditing firms. 

The Securities and Exchange Commission approved the standard in 2024, requiring all registered public accounting firms to identify specific risks to their practice and design a quality control system that can safeguard against those risks, as well as requiring an annual evaluation of firms' QC systems and reporting to the PCAOB. However, amid changes last year in the leadership at both the SEC and the PCAOB in the Trump administration, the mostly new set of members of the PCAOB decided to postpone the effective date of QC 1000 last August after some firms reported difficulties with implementing its requirements.  In June of this year, the PCAOB proposed amendments to QC 1000 to rescind several of the requirements. During a meeting Wednesday, the PCAOB voted to adopt the amendments.  

The amendments to QC 1000 will:

• Rescind the "design-only" requirement so that QC 1000 imposes requirements only on firms that are required to comply with applicable professional and legal requirements with respect to any "engagement";
• Provide increased flexibility in filling certain specified roles in the QC system by permitting roles to be assigned to non-firm personnel and divided among multiple individuals;
• Rescind the requirement to have an External QC Function;
• Narrow and simplify communication requirements relating to metrics that the firm communicates to external parties about its audit practice, firm personnel, or engagements;
• With respect to identified engagement deficiencies, require evaluation of whether similar engagement deficiencies exist on other engagements only if the identified deficiency resulted or could result in (i) a failure to obtain sufficient appropriate evidence to support the conclusion reached on an engagement or (ii) an inappropriate overall conclusion on the subject matter of an engagement;
• Revise the definition of QC deficiency to make clear that, when firms have implemented more than one quality response to address the same quality risk, they can take those other quality responses (e.g., compensating responses) into account when determining whether a QC deficiency exists;
• Allow firms to select the date as of which they annually evaluate the effectiveness of their QC system, rather than requiring firms to evaluate as of Sept. 30;
• Revise the QC system evaluation conclusions to align more closely with the conclusions in other quality management standards, while retaining a structured process, including specified factors for consideration, to guide the evaluation; and
• Simplify the requirements for retention of QC system documentation and abbreviate the retention period from seven to five years.

"Strong, effective auditing standards underpin the PCAOB's oversight, and QC 1000 is one of the most consequential standards that the board has ever adopted," said PCAOB chairman Demetrios (Jim) Logothetis in a statement. "The targeted amendments adopted today — which were informed by stakeholder feedback during the implementation process and continued scrutiny of the standard's costs and benefits — help us not only to fulfill our critical responsibility of getting QC 1000 right, but also to establish a foundation for our proposed strategic goal of modernizing the PCAOB's inspections with a QC-focused approach."

The PCAOB noted that the amendments adopted Wednesday don't change the effective date of QC 1000, which was postponed last year until Dec. 15, 2026. The amendments are still subject to approval by the SEC. If they're approved by the SEC, the amendments to QC 1000 and to the related PCAOB rule and forms will become effective on Dec. 15, 2026.

PCAOB board member George Botic, who was the only member of the board that originally approved the original QC 1000 standard in 2024 and served as acting chair before Logothetis was appointed, expressed his disappointment about the rescindment of the engagement quality review requirement during Wednesday's meeting.

"Turning to the substance of the recommendation, I can see, with one significant exception, that there are good reasons for the proposed amendments to QC 1000," he said. "The exception is the complete rescission of the requirement for an engagement quality control function, or EQCF. The existing EQCF requirement applies to firms that audit more than 100 issuers, but the Supplemental Request for Comment described that the board was considering the alternative of applying the requirement only to firms that audit more than 500 issuers. That would currently be a universe of five firms — five firms that audit issuers whose collective market cap approximates 82% of total U.S. market cap. I am very disappointed that the recommended amendments do not include even that alternative. While I recognize that, as noted in the release, our post-adoption support and outreach revealed implementation concerns, I am not persuaded by the release's statement that 'the implementation concerns apply equally to all firms.' I am skeptical that costs and implementation concerns are significant with respect to the five firms that audit more than 500 issuers."