Strategic Business Leader · Management and internal control systems
External Audit and Audit Committees for ACCA SBL
Updated 11 October 2026 · Fact-checked
External audit is an independent opinion on whether financial statements give a true and fair view. An audit committee is a board sub-committee of independent non-executives that oversees reporting, controls, internal audit and the external auditor. Together they give shareholders assurance and strengthen governance. In SBL, apply both to the scenario.
Understand External Audit and Audit Committees
Start with the problem. Shareholders own the company but directors run it. Directors prepare the financial statements, so shareholders need someone independent to check them. That is the external auditor. The auditor gives an opinion on whether the statements give a true and fair view (or present fairly) in line with the reporting framework. The auditor does not prepare the statements, does not guarantee there is no fraud, and does not judge the strategy.
External audit adds credibility to the numbers. Investors, lenders and regulators rely on it. It also acts as a governance check on management, because directors know their reporting will be challenged. The auditor must be independent, which means free from financial, personal and other threats to objectivity. Key threats include self-interest, self-review, familiarity and intimidation, and non-audit fees can create several of these.
The audit committee is a board committee. Governance codes say it should be made up of independent non-executive directors, with at least one member having recent and relevant financial experience. Its job is to oversee, not to do the work. It sits between the board, management and the auditors, so that auditors are not dependent on the executives they are checking.
Typical audit committee responsibilities are: monitor the integrity of financial statements and significant reporting judgements; review the internal control and risk management systems (unless a separate risk committee does this); oversee the internal audit function, including its appointment, resources and independence; recommend the appointment, reappointment and removal of the external auditor, and agree their fees; review auditor independence and the policy on non-audit services; and oversee the whistleblowing arrangements.
Compare with internal audit. Internal audit is part of or contracted by the organisation, reports to management and the audit committee, has a scope set by the organisation (controls, risk, value for money, compliance, fraud) and is aimed at improving operations. External audit is a statutory, independent, mainly backward-looking opinion on the financial statements, and the report goes to shareholders. In SBL, always link your points to the scenario facts, such as weak controls, a dominant CEO, or no audit committee.
Key rules to remember
- Purpose of external audit
- Independent opinion on whether financial statements give a true and fair view under the reporting framework
- It is an opinion, not a guarantee of accuracy or absence of fraud.
- Audit committee composition
- Independent non-executive directors, with at least one having recent and relevant financial experience
- Check the code in the scenario. Codes vary by country, so state the principle.
- Audit committee core duties
- Reporting integrity + internal controls and risk + internal audit + external auditor relationship + whistleblowing
- A useful checklist for any 'role of the audit committee' requirement.
- Auditor independence threats
- Self-interest, self-review, advocacy, familiarity, intimidation
- Name the threat, then give the safeguard, such as rotation, separate teams, or restricting non-audit services.
- Internal vs external audit
- Internal: management-directed, wide scope, improves controls. External: shareholder-focused, statutory, opinion on financial statements
- Compare on appointment, reporting line, scope, independence, objective and timing.
How to solve External Audit and Audit Committees questions
Use this method for any SBL requirement on external audit, audit committees or the link to governance.
- 1Read the requirement verb. Explain, evaluate, advise and recommend need different depth. Note who you are writing for, such as the board or the chair.
- 2Identify the issue in the scenario: no audit committee, weak independence, dominant executives, a control failure, or a fraud.
- 3Pick the framework: external audit purpose, audit committee duties, or internal versus external comparison.
- 4Set out the relevant points briefly, then apply each to the scenario facts with names, figures and events.
- 5Evaluate. Say what works and what does not, such as limits of audit, cost against benefit, or the risk of an audit committee lacking financial expertise.
- 6Make a clear recommendation, such as forming an audit committee of independent non-executives or restricting non-audit services.
- 7Write in the requested format (report, memo, briefing) in a professional tone to earn skills marks.
Quickest way: Checklist approach under time pressure
When to use it: Use when you have about two minutes to plan a short requirement worth around 8 to 12 marks.
- Write 'Audit committee: Reporting, Controls, Internal audit, External auditor, Whistleblowing' as a prompt.
- Tick which items the scenario touches.
- For each ticked item, write one scenario fact and one recommendation.
- Add one limitation or counterpoint to show evaluation.
- Finish with a one-line conclusion for the reader.
Common mistakes in External Audit and Audit Committees
Saying the external auditor prevents or detects all fraud and error.
Students confuse assurance with a guarantee.
Fix: State that the audit gives reasonable assurance on material misstatement. Management remains responsible for the statements and for preventing fraud.
Listing audit committee duties without applying them to the scenario.
Students memorise the list and write it down.
Fix: Tie every duty to a scenario fact and say what the committee should do about it.
Treating internal and external auditors as the same, or only listing definitions.
Both are called auditors and both review controls.
Fix: Compare on appointment, reporting line, scope, objective and independence, and then say which matters in the scenario.
Suggesting executive directors sit on the audit committee.
Students think the people who know the business should oversee it.
Fix: Say membership should be independent non-executive directors, to protect objectivity.
Ignoring auditor independence when the firm also earns large non-audit fees.
Students focus on the audit work and overlook threats.
Fix: Name the threat (self-review, self-interest), then give a safeguard: committee approval of non-audit work, a cap on fees, separate teams or rotation.
Giving a generic answer with no recommendation or professional tone.
Students run out of time or forget skills marks.
Fix: End with a clear, justified recommendation and write in the requested format.
Worked examples
Example 1
Zenith Retail plc is listed. The CEO is also chair. There is no audit committee. The finance director reports directly to the CEO and the external auditor has also been paid large fees for consulting work. Advise the board on the benefits of setting up an audit committee. (10 marks)
Show the solution
- Identify the issues: a dominant CEO/chair, no independent oversight of reporting, and a possible threat to the auditor's independence from consulting fees.
- Explain the committee: a board sub-committee of independent non-executive directors, with at least one with recent and relevant financial experience.
- Link to reporting: the committee can review the integrity of the financial statements and challenge the finance director's judgements, which reduces the risk of management bias since he reports to the CEO.
- Link to the auditor: the committee can recommend the auditor's appointment, review independence and approve or restrict non-audit services, which addresses self-review and self-interest threats.
- Link to controls and internal audit: it can review risk and controls and oversee internal audit, with a direct line to non-executives, away from the CEO.
- Evaluate: there is a cost and time burden, and the committee depends on having capable, independent members. However, the benefits to investor confidence and governance outweigh these.
- Recommend: separate the roles of chair and CEO, appoint independent non-executives, form the committee and restrict consulting work by the auditor.
Answer: The board should form an audit committee of independent non-executives. It would strengthen oversight of reporting, controls and internal audit, and protect auditor independence by controlling non-audit work. Costs and member capability are the limits, but the benefits justify it.
Example 2
Distinguish between the role of the external auditor and the internal auditor at Kaveri Foods, a manufacturer. Explain why the audit committee should oversee both. (8 marks)
Show the solution
- External auditor: appointed by shareholders, independent of the company, gives an opinion on whether the financial statements give a true and fair view, and reports to shareholders. The work is mainly backward-looking and driven by materiality.
- Internal auditor: employed by or contracted to the company, with a scope set by the board and the audit committee. It covers controls, risk, compliance, efficiency and fraud, and it recommends improvements. It is mainly forward-looking and supports management.
- Apply to Kaveri: the external audit would examine the year-end inventory and revenue for material misstatement, whereas internal audit might review production efficiency, supplier controls and procurement fraud risk.
- Why the audit committee oversees both: it protects the independence of each, ensures internal audit has resources and a direct reporting line, and recommends and reviews the external auditor.
- Coordination: the committee can avoid duplication and gaps, since the external auditor may rely on internal audit work where appropriate, which could reduce audit cost.
- Conclusion: the roles are complementary. The committee provides the independent link that makes both effective.
Answer: The external auditor gives shareholders an independent opinion on the financial statements. The internal auditor reviews controls, risk and efficiency for management. The audit committee oversees both to protect independence, coordinate their work and give the board reliable assurance.
Exam tips
- Always apply to the scenario. A generic list of audit committee duties earns few marks. Pick the three or four duties that fit the problem.
- When asked about independence, name the specific threat and give a matching safeguard.
- For a comparison requirement, use a clear structure: appointment, reporting line, scope, objective, independence. Then say what it means for this organisation.
- Show evaluation and professional skills: mention limits (cost, audit is not a guarantee, committee quality) and give a clear recommendation in the requested format.
- Use the code in the scenario if one is named. Otherwise state the principle without citing specific code clauses you are unsure of.
Practice questions from Management and internal control systems
- Calder Pharma is deciding between outsourcing internal audit to a professional firm and keeping it in-house. Which of the following is a rec…
- Aldous Retail has strict rules requiring three-way matching of orders, receipts and invoices, and managers must approve all purchases above …
- Tessaro Group's audit committee receives a report from the external auditor identifying a significant deficiency: sales staff can both raise…
- Wexley Foods operates in several countries. The audit committee wants assurance that employees comply with anti-bribery laws and internal po…
- Zephyr Logistics outsourced its internal audit two years ago. The board now notices that audit findings are generic, the provider rotates ju…
External Audit and Audit Committees in other exams
The same ground in other exams, if you are preparing for more than one or want another angle on it.
External Audit and Audit Committees: frequently asked questions
What is the role of the audit committee in ACCA SBL?
It oversees financial reporting, internal control and risk systems, internal audit and the external auditor, and runs the whistleblowing arrangements. It is made up of independent non-executives. In your answer, apply these duties to the scenario.
What is the purpose of external audit?
The purpose is to give shareholders an independent opinion on whether the financial statements give a true and fair view under the reporting framework. This increases confidence in the numbers and acts as a governance check on management. It is not a guarantee against fraud or error.
What is the difference between internal and external auditors?
External auditors are independent of the company, are appointed by shareholders and give an opinion on the financial statements. Internal auditors work for or are contracted by the company, report to management and the audit committee, and review controls, risks and efficiency to help improve operations.
Why should audit committee members be independent non-executives?
Independence lets members challenge management without conflicts of interest. Executives would be reviewing their own work. A member with financial experience also helps the committee scrutinise the accounts and the auditors properly.