How to Prepare for a Calendar Year-End Financial Statement Audit

A calendar year-end financial statement audit mostly gets settled before fieldwork starts. What your team does across October, November, and December sets how long the audit runs and how many open items survive into March. This guide, current as of October 2026, walks a controller through each request and why.

Independence keeps your auditor out of preparing the records under audit, so readiness belongs to your team. What follows describes a December 31, 2026 audit of a privately held, for-profit company under U.S. GAAP. Our explainer on preparation, compilation, review, and audit covers the levels below an audit.

What Is a PBC List, and When Should You Ask for It?

A PBC list is the “prepared by client” schedule of everything the audit team expects you to produce. Ask for the current-year version in October and compare it line by line against last year’s. Then add three columns of your own: the internal owner, the source system, and the earliest date the item can exist.

That last column does the real work. A bank reconciliation exists on January 2; a revenue memo waits for the close. Sorting a 90-line request by availability turns a wall into a sequence.

When Should Year-End Audit Preparation Start?

Interim fieldwork in November or early December pulls risk assessment, walkthroughs, and some substantive testing out of the January crunch. Under AU-C section 315, revised by SAS No. 145, the auditor identifies and assesses the risks of material misstatement. None of that work has a reason to wait for December 31.

Interim testing carries a cost: anything tested early needs roll-forward procedures for the stub period. Ask your engagement partner which accounts can move.

What Do Auditors Actually Check in Cutoff Testing?

Cutoff testing asks whether transactions recorded near December 31 landed in the right period. Expect the team to trace the last shipments before year-end and the first ones after, match receiving reports to recorded payables, and walk through cash activity in the first weeks of January.

The search for unrecorded liabilities catches controllers. Auditors read the January and February check runs, the payables aging, and unmatched receipts for invoices that belong to 2026.

Capture that evidence while it costs nothing. On the last business day, record the final bill of lading, receiving report, check, and invoice numbers. Ten minutes in December saves days in March.

What Support Do Auditors Need for Accounting Estimates?

Every material estimate needs a memo showing the method, the data, the assumptions, and who reviewed it. AU-C section 540, revised by SAS No. 143 and effective for periods ending on or after December 15, 2023, pushed auditors to weigh estimation uncertainty, complexity, and subjectivity for each estimate separately.

Expect sharper questions about how you reached each number: allowance for credit losses, inventory reserves, warranty accruals, deferred tax valuation allowances, impairment. One page per estimate, with a look-back against last year, answers most of them in advance.

Who Sends the Confirmations, and Which Ones Should You Expect?

Your auditor sends them. AU-C section 505 tells the auditor to maintain control over external confirmation requests, which is why you cannot mail a bank confirmation yourself or forward a reply. Your part is accurate contacts and a signed authorization, delivered early.

AU-C section 501 governs the legal letter: management sends the letter of audit inquiry to counsel and the auditor evaluates the reply. Build that list in November, including any attorney hired for a single matter.

Why Do Auditors Ask for Fixed Asset and Debt Roll-Forwards?

A roll-forward proves an ending balance instead of asserting it: beginning, plus additions, less disposals, equals ending, every column tied to the general ledger. Auditors test additions against invoices and your capitalization threshold, agree disposals to the gain or loss, and recompute depreciation.

The debt roll-forward carries more classification risk. Give the team the amortization schedule, the current and noncurrent split at December 31, and the covenant calculation as of that date. If you tripped a covenant, classification turns on the terms and dates of any waiver, so document both.

How Should You Plan the Physical Inventory Observation?

The count date drives the whole calendar. AU-C section 501 directs the auditor to attend physical inventory counting when inventory is material, unless attendance proves impracticable. Pick the date with your engagement team before Thanksgiving, not in the third week of December.

Send written count instructions two weeks ahead. Freeze movement, control the tags, and keep the auditor’s test count sheets with the final listing. Explain every book-to-physical adjustment above your threshold in writing.

What Revenue Recognition Support Will the Audit Team Ask For?

Expect the team to work one revenue stream at a time under ASC 606: the contract population, signed-contract samples, the performance obligations you identified, how you estimated variable consideration, and the point-in-time or over-time conclusion.

New contract shapes generate the findings, so write the accounting conclusion on an unfamiliar 2026 deal while the ink is wet. Add the deferred revenue roll-forward and January credit memos.

What Will the Audit Team Test That You May Not Expect?

Three procedures catch controllers off guard. Under AU-C section 240, the auditor tests journal entries and other adjustments for management override, with attention to entries posted after the period closed and entries made by people who rarely post any. Request a full-year entry extract early, because some systems export it slowly.

The second is technology. SAS No. 145 added an explicit requirement about your systems.

“Based on controls identified in paragraph .27, the auditor should identify the IT applications and the other aspects of the entity’s IT environment that are subject to risks arising from the use of IT.” AU-C section 315.28, as amended by SAS No. 145

In practice that means user access listings, terminated user reports, and change approvals, evidenced rather than described.

Third comes fraud inquiry. The team asks management, accounting staff, and often the board whether anyone knows of fraud or suspects it. Our piece on spotting employee fraud in small businesses covers the patterns those conversations surface.

What Do Related Parties and Subsequent Events Require?

AU-C section 550 asks for a complete roster of related parties and every transaction with them, including ones nowhere near arm’s length. Common misses: owner-affiliated rent, shareholder loans in both directions, management fees to a sister entity, personal guarantees.

AU-C section 560 covers December 31 through the report date. Keep a running subsequent events memo from January 1: new borrowings, litigation, a customer bankruptcy, an insurance claim, a large sale. The team reads board minutes through that date.

What Do Going Concern and the Representation Letter Involve?

Management evaluates going concern first, and the auditor evaluates that assessment under AU-C section 570. FASB sets the window.

“Management should evaluate whether there are conditions or events, considered in the aggregate, that raise substantial doubt about the entity’s ability to continue as a going concern within one year after the date that the financial statements are issued …” FASB Accounting Standards Update No. 2014-15

Document the evaluation even when the answer looks obvious: a short memo with the cash forecast, unused borrowing capacity, and covenant headroom. Written representations under AU-C section 580 carry the report date, so read the draft in February.

What Is New for a December 31, 2026 Audit?

Three changes land on this cycle. SAS No. 149 replaces the group audit standard for group financial statements for periods ending on or after December 15, 2026, so a December 31, 2026 audit is the first under it.

Two parts reach a controller. The first is the “referred-to auditor,” one who audits a component and whose report the group engagement partner refers to rather than taking responsibility for. That makes who audits which subsidiary an October decision, not a January discovery. The second is aggregation risk, the chance that misstatements across components add up past group materiality. It pulls component performance materiality below the group number, so each location gets tested to a smaller threshold, as the Journal of Accountancy describes.

Quality management is the second. SAS No. 146, codified in AU-C section 220, applies to engagements for periods beginning on or after December 15, 2025, alongside the AICPA’s firm-level quality management standards. Your 2026 audit sits inside that window, which surfaces as extra documentation and sometimes a review before the report is dated.

Disclosure is the third. ASU 2023-09 reaches private companies for annual periods beginning after December 15, 2025, so the 2026 statements are the first. Private companies describe rate reconciling items qualitatively rather than in a numerical table. Every entity also discloses income taxes paid net of refunds, split among federal, state, and foreign, with any jurisdiction at 5% or more of the total broken out on its own. That figure is cash, not provision, and few systems produce the split on demand.

Which Public Company Rules Do Not Apply to Your Audit?

A private-company audit follows AICPA generally accepted auditing standards. PCAOB standards govern audit reports for issuers and broker-dealers, so AS 2201, the integrated audit of internal control over financial reporting, describes a different engagement than yours.

Two distinctions save argument. Your auditor opines on the financial statements, not on the effectiveness of internal control, although control deficiencies still travel to you in writing. FASB’s expense disaggregation standard, ASU 2024-03, reaches public business entities only.

What Does the Internal Control Letter Say, and When Does It Arrive?

It can arrive with the report, and AU-C section 265 sets the outer limit rather than the norm.

“The communications referred to in paragraphs .11-.12 should be made no later than 60 days following the report release date.” AU-C section 265.13

The same standard defines a material weakness as a deficiency, or combination of deficiencies, creating a reasonable possibility that a material misstatement will not be prevented, or detected and corrected, on a timely basis. A significant deficiency ranks below that yet still merits board attention. Read the letter, write a remediation plan with dates, and bring it to next year’s planning call.

What Actually Shortens an Audit, and What Does Not?

Continuity and completeness shorten an audit. Raw speed does not. The table below sorts the moves a controller controls by their effect on fieldwork.

The decisions that shape your 2027 fieldwork are in front of you now: the count date, the PBC list, an owner on every line, the confirmation contacts, and a subsequent events memo started January 1. None of it waits on your auditor. Bonded contractors have another reason to hold the timeline: what a surety looks for in a finished audit report rests on the same evidence.

Contact Us

WhippleWood CPAs audits privately held companies across Colorado, and Ron Bass, CPA, has led the firm’s audit practice since 2010. To talk through your December 31 timeline, contact us. Nonprofit leaders should read the companion piece on what actually happens during a nonprofit audit.

This article is general information, not accounting, tax, or legal advice, and standards and effective dates change. Independence rules also limit what an audit firm may do for an attest client. The preparation described here stays with management; we plan the engagement around it, not perform it.