Audit Readiness: Arrive at Your Audit Fully Prepared

Audit readiness refers to the set of preparatory measures a company undertakes before a statutory or voluntary audit of its annual accounts to minimise qualification risk and reduce auditor working time. In Spain, the statutory audit obligation is governed by Article 263 of the Companies Act (LSC) and applies when a company meets at least two of three size thresholds for two consecutive years: total assets above EUR 2.85 million, annual turnover above EUR 5.7 million, or an average headcount above 50 employees. The audit must be conducted under Spanish NIA-ES standards (adapted International Standards on Auditing), and the first audit year is consistently the most demanding because the auditor must verify opening balances across the entire balance sheet history.

Our team combines accounting expertise, Spanish audit standards knowledge, and practical experience of what ROAC auditors look for — delivering preparation that makes audits faster, cheaper, and qualification-free.

Why First Audits Are More Demanding — and How Companies Get Caught Off-Guard

Article 263 of the Spanish Companies Act establishes the statutory audit obligation when a company meets at least two of three size criteria for two consecutive years: total assets above EUR 2.85 million, annual turnover above EUR 5.7 million, or average headcount above 50. The first year thresholds are exceeded does not trigger the obligation — the second consecutive year does.

Many companies discover they are obligated to be audited when the Companies Registry requests audited accounts at the time of filing, or when their bank requests audited accounts to renew a credit line. At that point, the financial year has already closed and the auditor must work with the period’s data without any opportunity for prior preparation. The frequent result is a long, expensive first audit — with qualifications that could have been avoided.

A first audit is structurally more demanding than a subsequent one. The auditor has no verified prior-year opening balances and must obtain audit evidence not just for the current year but for opening balance sheet positions as well — fixed assets acquired in prior years, the history of receivables, the origin of equity accounts, and the consistency of accounting policies applied since the company’s founding. This additional work on opening balances is what makes the first audit significantly more expensive than subsequent audits, and it is also where the most serious qualification risks typically lurk.

NIA-ES 315 and 570: The Two Standards That Determine How the Auditor Approaches Your Company

NIA-ES 315 (Identifying and Assessing the Risks of Material Misstatement through Understanding the Entity and Its Environment) requires the auditor to conduct, before fieldwork begins, a structured evaluation of the company’s internal control environment. This is not a formality: the auditor reviews the key controls across the accounting cycle and, where they find controls weak or absent, expands substantive testing volume accordingly. A company with well-documented internal controls allows the auditor to reduce detail testing; a company without control documentation turns every balance into territory to be explored from scratch.

NIA-ES 570 (Going Concern) requires the auditor to formally evaluate whether there are significant doubts about the company’s ability to continue as a going concern. The indicators that trigger this evaluation include: sustained losses, negative working capital, breach of banking covenants, pending litigation of significant amount, or dependence on a single customer or supplier. If the auditor concludes there is material uncertainty, they must include an emphasis-of-matter paragraph in the report — which, while not technically a qualification, raises the same concerns with banks and business partners. We identify and address these indicators in the preparation phase, before the auditor formally evaluates them.

What Internal Controls Auditors Actually Review

Internal control is the set of procedures a company maintains to ensure its accounting records are complete, accurate, and timely. Auditors assess internal control as part of their audit planning (NIA-ES 315): robust internal control allows them to reduce substantive testing; weak internal control forces them to expand it — which increases cost and duration.

The controls auditors consistently review in mid-sized companies are: payment authorisation and segregation of duties between the person who authorises and the person who records, monthly bank reconciliation and accounting tie-out, the monthly close process with its checklists, fixed asset register management and reconciliation to the ledger, and the billing and collection process with its anti-fraud controls. We document all existing controls and supplement missing ones with procedures the team can implement immediately.

The management letter — the document the auditor delivers to management with internal control improvement points — is reviewed by banks in financing processes and is a valued element in company sale processes. A financial due diligence initiated by a prospective buyer always requests management letters from the past three years. Reducing management letter points before a transaction is one of the pre-sale preparation services we offer in coordination with our M&A advisory team.

The Most Common Qualification Risks in Spanish Companies

The most frequent qualification risks we identify in our pre-audit diagnostics fall into five categories. First, chart of accounts classification errors: items booked as operating expenses that should be capitalised as fixed assets, or vice versa, creating both profit and asset misstatements. Second, unrecorded trade receivables impairment: companies that have not formally calculated the provision for doubtful debts leave open exposure to auditor-mandated provisions that reduce reported profit.

Third, litigation provisions without legal support: the auditor will require documentation from legal counsel confirming the existence, likelihood, and estimated amount of any potential liability. A generic provision without a lawyer’s written opinion is not acceptable audit evidence. Fourth, related-party transactions without market documentation: any transaction with shareholders, directors, or affiliated companies at non-market terms requires specific disclosure and potentially specific accounting treatment. Fifth, undocumented accounting policies: auditors need to verify that the policies applied are consistent with prior years and with generally accepted accounting principles — without written policies, the auditor has nothing to verify against.

Coordinating with the Auditor to Make Fieldwork Efficient

The relationship between the company and the auditor during fieldwork is determinative for process efficiency. Well-organised auditors work from information request lists delivered at the start of fieldwork. If the company’s team is not ready to respond promptly, the auditor waits — and charges for that time.

Our interface during the audit has three effects: first, we reduce auditor waiting time by responding to requests within hours rather than days; second, we prevent misunderstood information requests from generating double work; third, we manage third-party confirmations (receivable, payable, and bank circularisations) with the follow-up needed to obtain complete responses before the auditor closes fieldwork.

If your company needs an outsourced CFO to coordinate the accounting close and the auditor relationship on a continuous basis throughout the year, our team can take on that broader role. Audit preparation is most efficient when the monthly accounting close already incorporates the controls and documentation the auditor will need — rather than organising everything in the weeks before fieldwork begins.