An audit is an independent firm examining the statements and giving an opinion on whether they're presented fairly, in all material respects, per the framework. Three deflations are worth taking in. (1) It gives reasonable assurance, which falls short of certainty. Auditors sample and don't verify everything. (2) Materiality is set relative to benchmarks, with a classic rule of thumb of ~5% of pre-tax profit adjusted by judgment. Errors below it may sail through. (3) The auditor's opinion covers the statements. It says nothing about the quality of the business or the value of the stock. Satyam carried clean opinions while ~₹5,000 crore of claimed cash did not exist, per the founder's own 2009 confession letter. The fake balances were in the very account auditors are supposed to confirm independently with banks. A clean opinion is where trust starts. It's never where it ends.
Advertisement
What do the different audit opinions mean?
The opinion ladder is one table to memorize:
| Opinion | The auditor is saying | Analyst response |
|---|---|---|
| Unmodified (clean) | Statements are fairly presented in all material respects | Proceed — with your own skepticism intact |
| Unmodified + Emphasis of Matter | "Fairly presented, but look here" — highlights a disclosed matter (a pending court case, a pandemic estimate). Not a modification | Read the referenced note. EOM ≠ qualification — a common candidate confusion |
| Qualified ("except for") | Fairly presented except a specific, material item — a misstatement or an inability to get evidence, material but not pervasive | Quantify the exception yourself; restate the numbers as if the auditor won the argument (Worked Example 3) |
| Adverse | The statements as a whole are materially and pervasively misstated | The accounts are unusable. For analysis purposes: uninvestable until resolved |
| Disclaimer | "We could not get enough evidence to form any opinion" | Often worse than adverse — the books may not be auditable at all |
What are KAMs and CAMs?
Since 2017–19, auditors must publicly describe the matters that most occupied them. In India these are Key Audit Matters (ISA 701 / SA 701, listed companies, FY19 onward). In the US they're Critical Audit Matters (PCAOB AS 3101, large accelerated filers from FY2019, others 2020). Each KAM/CAM has two parts. One says why it was significant (the estimation risk). Another says how the audit addressed it. Treat the pair as a treasure map. The audit team is telling you, for free, where the numbers are softest. Use it three ways:
- Map each KAM to its note and put that note on your deep-read list. Typical population: revenue recognition (especially over-time contracts), impairment of goodwill, ECL on loans, litigation provisions, deferred-tax recoverability.
- Diff the list year over year. A new KAM means a new soft spot, or a new auditor's fresh eyes. A dropped KAM was either resolved or renegotiated out, so check which.
- Compare across peers. If every IT-services auditor flags fixed-price contract revenue but one company's auditor doesn't, ask why.
Two real anchors help, but verify them in the current filings, because KAM/CAM lists change. Recent Microsoft 10-Ks carry a CAM on revenue recognition. It covers the judgment in identifying distinct performance obligations and estimating standalone selling prices across its bundled software/cloud offerings. Recent Infosys annual reports carry a KAM on revenue recognition for fixed-price contracts measured by percentage of completion, where cost-to-complete estimates directly set reported margin. It's the same economic soft spot in two jurisdictions. In both cases the KAM points you straight to the note, and the estimate, that you should stress-test. Infosys is doubly useful because it files both an Indian AR (Ind AS) and a US 20-F (IFRS). Read the two side by side once and you'll see how converged the frameworks are, and where the disclosure cultures differ.
What does a going-concern warning mean?
Accounts are prepared on the assumption that the entity survives. That's the going-concern assumption, and management must assess it. Under IFRS/Ind AS the assessment covers at least 12 months from the reporting date. Under US GAAP (ASC 205-40) it covers 12 months from the date the statements are issued. If substantial doubt exists, US reports speak of "substantial doubt about the entity's ability to continue as a going concern", along with management's plans and whether they alleviate the doubt. ISA/SA 570 reports carry a separate headed section, "Material Uncertainty Related to Going Concern." Two analyst rules follow. (1) These words are close to a fire alarm. Lenders, suppliers and customers all read them, so they can be self-fulfilling. (2) Their absence proves little. Auditors flag going concern late, and many failures carried no flag a year prior. Your solvency ratio work doesn't get outsourced to this paragraph.
What should you check about the auditor?
Watch the auditor too. Identity, tenure, fees and exits all carry information:
- Resignations mid-term are red alerts. India lived through a famous wave in 2018. Deloitte resigned from Manpasand Beverages days before results, and GST-fraud arrests followed. PwC walked from Vakrangee. When an auditor would rather lose a fee than sign, believe them. In the US this surfaces in an 8-K (Item 4.01) with the auditor's letter. In India it shows up in Reg 30 disclosures, and since CARO 2020 clause (xviii) the new auditor must state whether the predecessor's concerns were considered.
- Rotation (India). Under Companies Act s.139(2), individual auditors get one 5-year term and firms two 5-year terms (max 10 years), followed by a 5-year cooling-off. Year-10 handovers are worth watching, because incoming auditors reset judgments and sometimes force restatements. NFRA (created 2018, post-IL&FS) is the audit regulator with teeth, and its published orders on audit failures are free forensic education.
- Fees. Audit fee vs non-audit fee, both disclosed (CG report in India, proxy Item 14 in the US). When non-audit fees rival audit fees, independence is compromised in appearance and sometimes in fact.
- ICFR opinions. In the US it's the SOX 404(b) auditor attestation on internal control over financial reporting (Item 9A). In India it's the s.143(3)(i) opinion on internal financial controls. A material weakness disclosure means the pipes that produce the numbers are known to leak.