Audit and Assurance · Objective and general principles

Corporate Governance and the Role of the Auditor

Updated 11 October 2026 · Fact-checked

Corporate governance is the system by which a company is directed and controlled. Agency theory explains why: owners (principals) hire managers (agents), whose interests may differ. Governance structures, such as non-executive directors and audit committees, reduce that conflict. Auditors add credibility to reported information and report weaknesses to those charged with governance.

Understand Corporate Governance and the Role of the Auditor

Start with the problem. Shareholders own a company but usually do not run it. They appoint directors to run it for them. This is the agency relationship: shareholders are the principals and directors are the agents.

The risk is that agents act in their own interest. They might overpay themselves, take on projects for prestige, or present flattering results to protect their bonus. Shareholders cannot watch everything, so there is an information asymmetry: management knows more than owners. The costs of monitoring and controlling this are called agency costs.

Corporate governance is the set of structures and processes that reduce this problem. Typical features: a board with a balance of executive and non-executive directors (NEDs), separation of the chair and chief executive roles, board committees (audit, remuneration, nomination), a sound system of internal control and risk management, and transparent reporting. Those charged with governance (TCWG) are the people with responsibility for overseeing the strategic direction and accountability of the entity. This often means the board, and in practice the audit committee for audit matters.

The audit committee is usually made up of independent NEDs. Its typical tasks: monitor the integrity of the financial statements, review internal controls and risk management, oversee the internal audit function, and recommend the appointment, fees and independence of the external auditor. It also reviews the external audit process and findings. This gives the external auditor a body independent of executive management to report to.

The external auditor contributes to governance by giving an independent opinion on whether the financial statements give a true and fair view. The auditor also communicates significant findings and control deficiencies to TCWG, and must remain independent. Internal audit is different: it is part of the entity, reports to management or the audit committee, and its scope is set by the entity. It covers controls, risk, efficiency and compliance, not just the financial statements. Directors remain responsible for the financial statements and internal control. The auditor does not take over those duties.

Key rules to remember

Agency relationship: Principals (shareholders) → appoint → Agents (directors); Conflict of interest and information asymmetry create agency costs. Governance and audit reduce them.
Core audit committee functions: Financial reporting integrity + internal control and risk + internal audit oversight + external auditor relationship; Use these four headings to structure any answer on the committee's role.
External vs internal audit: key contrasts: Purpose | Reports to | Independence | Scope | Appointment; External: opinion for shareholders, independent of the entity, set by law or standards. Internal: assists management, part of the entity, scope set by the entity.
Auditor and TCWG: Auditor reports significant findings and deficiencies to TCWG; directors keep responsibility for the financial statements and control; Do not say the auditor is responsible for preparing the financial statements or internal controls.

How to solve Corporate Governance and the Role of the Auditor questions

Use this method for any governance question, whether it is an objective test item or a written requirement.

1Read the requirement verb carefully: explain, describe, evaluate or recommend. This sets the depth.
2Identify the parties in the scenario: shareholders, directors, NEDs, audit committee, internal audit, external auditor.
3Name the underlying issue in one phrase, for example weak oversight, lack of independence or missing internal audit.
4Link the issue to the governance principle: agency conflict, independence, accountability or transparency.
5Apply the facts: quote the scenario detail that shows the weakness or strength.
6Give the practical consequence or recommendation, for example set up an audit committee or report to TCWG.
7Check that you have not given the auditor a management responsibility, and that you have made as many separate points as there are marks.

Quickest way: Who, why, so what

When to use it: Use this for short objective questions and for planning a written answer in under a minute.

Who: identify whose role is being tested (director, NED, committee, internal auditor, external auditor).
Why: connect to the agency problem the role solves, such as independence or oversight.
So what: pick the option or point that matches the role's real function.
Eliminate any option that gives management duties to the auditor or gives the external auditor control over internal audit.
For written answers, write one point per mark: state the point, add a short reason or scenario link.

Common mistakes in Corporate Governance and the Role of the Auditor

Saying the auditor is responsible for preventing fraud and maintaining internal control.
Students confuse the auditor's detection-related duties with management's duties.
Fix: State that directors are responsible for the financial statements, internal control and fraud prevention. The auditor gives an opinion and reports findings.
Treating internal and external audit as the same thing.
Both examine controls and records, so they look alike.
Fix: Compare them on purpose, reporting line, independence, scope and appointment. External audit gives an opinion to members. Internal audit helps management and the board.
Describing the audit committee as executive management.
Students forget it is made up of independent NEDs.
Fix: Say it oversees reporting, controls, internal audit and the external auditor relationship. It does not run daily operations.
Defining agency theory without applying it.
Students memorise the definition and stop.
Fix: Name principal and agent, then show the specific conflict in the scenario, such as bonus-driven earnings management, and say how governance or audit addresses it.
Listing generic governance features with no link to the scenario.
Students recite a code from memory.
Fix: Pick only features relevant to the facts, for example a combined chair and CEO, and explain why that creates a risk.
Claiming that having an audit committee removes the need for external audit.
Students think oversight and audit are interchangeable.
Fix: The committee is internal to the board. The external audit is an independent opinion. They complement each other.

Worked examples

Example 1

Explain the agency relationship between shareholders and directors, and describe how an audit committee helps to reduce the problems it creates. (6 marks)

Show the solution

Define the relationship: shareholders (principals) appoint directors (agents) to run the company on their behalf.
State the problem: directors may pursue their own interests, such as high pay or short-term profit for bonuses, and know more than shareholders (information asymmetry).
Explain the consequence: shareholders face agency costs, including monitoring costs and possible losses from poor decisions.
Audit committee point 1: made up of independent NEDs, so it gives objective oversight of executives.
Audit committee point 2: reviews the financial statements and accounting policies, reducing the risk of manipulated results.
Audit committee point 3: reviews internal controls and oversees internal audit, and manages the relationship with the external auditor, including recommending appointment and checking independence.

Answer: Shareholders (principals) delegate running the company to directors (agents), whose interests may differ and who hold more information. This creates agency costs. An audit committee of independent NEDs provides objective oversight, reviews the integrity of the financial statements, monitors internal controls and internal audit, and oversees the external auditor's independence and findings, reducing the conflict.

Example 2

A listed company has no internal audit function and no audit committee. The chair is also the chief executive. The finance director has a bonus linked to profit. Identify the governance weaknesses and explain what the external auditor should do. (6 marks)

Show the solution

Weakness 1: the chair and CEO roles are combined, so power is concentrated in one person with less challenge.
Weakness 2: no audit committee, so there is no independent body to oversee financial reporting, controls and the auditor.
Weakness 3: no internal audit, so there is no independent monitoring of controls and weaknesses may go unnoticed.
Weakness 4: the profit-linked bonus gives an incentive to manipulate results, which is an agency risk.
Auditor response 1: treat these as increasing risk, including the risk of material misstatement and fraud, so apply more professional scepticism and more extensive procedures, especially on profit-related areas.
Auditor response 2: communicate significant control weaknesses to those charged with governance, such as the board or NEDs, and recommend an audit committee and internal audit.

Answer: The weaknesses are a combined chair and CEO, no audit committee, no internal audit and a profit-linked bonus for the finance director. Together they weaken oversight and create an incentive to overstate profit. The auditor should raise the assessed risk of misstatement, apply more scepticism and testing on profit-related areas, and report the weaknesses and recommendations to those charged with governance.

Exam tips

In written answers, tie each governance point to the scenario. Generic lists score poorly.
Use the agency vocabulary precisely: principal, agent, information asymmetry, agency costs.
For internal vs external audit questions, use a short comparison structure, one point per contrast.
Remember objective test questions are all or nothing. Read for words like only, always and responsible, which often signal the wrong option.
When asked about reporting to TCWG, say who receives it and why: it is independent of executive management.

Corporate Governance and the Role of the Auditor in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Corporate Governance and the Role of the Auditor: frequently asked questions

What is agency theory in audit?

Agency theory describes the relationship between owners (principals) and managers (agents). Managers may act in their own interests and know more than owners. Audit gives owners independent assurance that the information managers report is reliable.

What is the role of the audit committee in ACCA AA?

It is a board committee, normally of independent NEDs. It oversees financial reporting, internal control and risk management, the internal audit function, and the relationship with the external auditor, including their independence.

What is the difference between external audit and internal audit?

External audit is independent of the entity and gives an opinion on the financial statements to the shareholders. Internal audit is part of the entity, its scope is set by management or the board, and it covers controls, risk, efficiency and compliance.

Who are those charged with governance?

They are the people or bodies responsible for overseeing the entity's strategic direction and accountability. This normally includes the board of directors and, for audit matters, often the audit committee.