A general audit practice competes on relationships and price. A niche practice competes on knowledge: the referral sources know what the firm does, the work repeats across clients, and the staff get faster because they have seen the issues before. For a small firm, a niche is also the most credible answer to the question of how to grow the attest side without hiring a generalist for every new client.
Niches also have costs, and for attest work some of them are written into professional standards. This guide sets out a way to choose, using criteria the standards themselves emphasize. It does not rely on market-size statistics, which vary by region and change faster than a firm's plan should.
What a niche is
A niche is a defined type of client or engagement, such as:
- employee benefit plan audits (401(k) and other ERISA plans)
- governmental audits and single audits under Uniform Guidance
- nonprofit audits, including donor-restricted funds and grant compliance
- construction contractors
- HOAs and condominium associations
- closely held operating companies in one industry, such as dealerships, medical practices or restaurants
What makes it a niche is repetition: the same accounting issues, the same regulatory framework, the same referral sources and the same set of audit procedures that the firm can improve each year.
Start with the firm's existing practice
The best niche is usually already in the client list. Pull three years of engagements and look at revenue, hours and realization by client type. Ask which clients came by referral, which are easiest to staff, which produce review notes that repeat every year and which the team likes working on. A niche that is already 15 percent of the practice by revenue is a better candidate than one the firm has never served.
This also matches how peer review looks at a firm. The AICPA peer review standards direct reviewers to consider any industry that represents a 10 percent or more concentration of the firm's audit practice as a "must-cover" area, one where a team member must have recent experience in the industry to aid risk assessment and decide whether an engagement should be selected. A niche that crosses that threshold will be examined, so the firm should be able to demonstrate competence there.
A five-test screen
Score each candidate niche against five questions.
1. Competence
Can the firm perform the work at the level the standards require? AU-C 220 (SAS 146) requires the engagement partner to determine that the engagement team collectively has the appropriate competence and capabilities. It lists considerations such as practical experience with engagements of a similar nature and complexity, understanding of professional standards and legal and regulatory requirements, expertise in specialized areas, expertise in the IT used by the entity and knowledge of the industry. For governmental audits, competence also includes knowledge of Government Auditing Standards and the applicable reporting requirements.
Ask: who in the firm already has this? What training is needed? How many engagements before a second person can lead one?
2. Peer review implications
Some niches are must-select engagement types under the AICPA peer review standards, meaning the peer review must include at least one engagement of that type. The categories in the standards are:
- engagements under Government Auditing Standards: if the firm performs the financial statement audit of an entity subject to GAS, at least one such audit must be selected, and if the firm performs engagements of entities subject to the Single Audit Act, the reviewer must evaluate a compliance audit;
- audits of employee benefit plans under ERISA, with attention to the risks of limited-scope (ERISA Section 103(a)(3)(C)) versus full-scope audits and the different plan types;
- audits under FDICIA of insured depository institutions at or above the standards' asset threshold;
- examinations of service organizations that result in SOC 1 or SOC 2 reports.
The standards tell reviewers to consider the firm's experience in each: the number of engagements the firm performs, the years of experience, the number of team members with experience, CPE or specialized training and the reasonableness of hours. A firm entering a must-select niche is therefore choosing to be reviewed on it, and the first engagement may affect the timing of the next review. The standards give an example of a firm that may request an extension when it performs its first must-select engagement with a period end during the peer review year that has not been issued before the review begins.
This is not a reason to avoid these niches. It is a reason to plan for the review from the first engagement. See AICPA peer review.
3. Capacity and seasonality
Different niches load the calendar differently. Single audits are due to the Federal Audit Clearinghouse within 30 calendar days after the auditee receives the auditor's report or nine months after the end of the audit period, whichever comes first, and the audit is required when an entity expends $1,000,000 or more in federal awards in its fiscal year. Governmental and nonprofit clients can have fiscal years that do not end on December 31, which spreads work across the year. Benefit plan audits follow Form 5500 filing dates rather than the calendar-year audit cycle. Map each niche's deadlines against the firm's current calendar: a niche that peaks when the existing practice is quiet adds capacity use without adding strain. See audit capacity planning and single audit walkthrough.
4. Independence and non-attest services
A niche built around attest work needs a clear policy on non-attest services to the same clients. Many niche clients, such as small nonprofits and plans, ask their auditor to prepare the financial statements or keep the books. Each of those requests needs a threats-and-safeguards analysis before acceptance. See independence and nonattest services.
5. Referral flow and repeatability
Where will the next ten clients come from? In most attest niches the answer is a small number of intermediaries: the bank or recordkeeper for plans, the state agency or association for governmental and nonprofit work, the lender or surety for contractors. Identify them, and estimate how many referrals a year they could realistically supply. A niche with no identifiable referral path will not produce clients.
Matching niches to the framework
| Niche | Standard drivers | Key competence | Peer review |
|---|---|---|---|
| Employee benefit plans | ERISA, DOL reporting | Plan accounting, participant data, SOC reports of recordkeepers | Must-select |
| Governmental and single audits | GAS, Uniform Guidance | Yellow Book CPE, compliance testing | Must-select; state and local governments are must-cover |
| Nonprofits | ASC 958 | Contributions, restrictions, functional expenses | Not must-select; single audits trigger GAS |
| Construction | ASC 606, WIP | Percentage of completion, bonding | Not must-select; consider if over 10 percent concentration |
| HOAs | Reserve funds, supplementary information | Fund accounting, reserve study review | Not must-select |
The governmental peer review entries come from the standards' appendix on must-select and must-cover engagements: engagements under Government Auditing Standards are must-select, and state and local governments are must-cover. For the underlying requirements see Yellow Book, 401(k) audit requirements, nonprofit audit requirements, construction contractor audits and HOA audits.
A 12-month rollout
Months 1 to 2: decide. Run the five-test screen with the partners. Pick one niche, not three.
Months 2 to 4: build competence. Assign a partner and a manager to the niche. Complete the required CPE. Obtain or build audit programs, disclosure checklists and a PBC request list specific to the niche. Identify the quality management risks the niche adds and respond under SQMS No. 1. See SQMS 1.
Months 3 to 6: reach out. Meet the referral sources. Offer a short briefing on common findings or filing deadlines. Publish one useful resource per quarter.
Months 6 to 9: pilot. Take two or three clients, with the partner closely involved. Track hours, realization and review notes.
Months 9 to 12: review. Compare actual hours to budget, staff experience and client feedback. Decide whether to scale, adjust pricing or stop.
Frequently asked questions
How many niches should a small firm have?
One or two. Each niche needs trained people, specific audit programs and a referral network, and a small firm cannot sustain many at once.
Does a niche mean turning away other clients?
No. A niche is where the firm concentrates growth, not a limit on the existing practice.
What are must-select engagements in peer review?
Engagement types that must be included in the peer review sample: engagements under Government Auditing Standards, ERISA plan audits, FDICIA audits and SOC 1 or SOC 2 examinations.
Sources
- AICPA Standards for Performing and Reporting on Peer Reviews (effective for peer reviews commencing on or after May 1, 2022, updated through Peer Review Standards Update No. 3), section 210, Appendix C, Additional Requirements for Must-Select and Must-Cover Engagements: https://mn.gov/boa/assets/AICPA%20Clarified%20Peer%20Review%20Standards_tcm1233-764397.pdf
- AICPA, SAS No. 146, Quality Management for an Engagement Conducted in Accordance With GAAS (AU-C 220), competence and capabilities of the engagement team: https://a-us.storyblok.com/f/1015104/x/32853782b6/aicpa-sas-146.pdf
- 2 CFR 200.501 (audit requirements; $1,000,000 federal awards threshold): https://www.law.cornell.edu/cfr/text/2/200.501
- 2 CFR 200.512 (report submission; 30 days or nine months): https://www.law.cornell.edu/cfr/text/2/200.512
CORAA prepares ready-to-review audit files for US CPA firms from client books; you review and sign. See /us.
Part of CORAA University · Quality management and practice: related guides, calculators and templates.
AU-C references are to AICPA Professional Standards, paraphrased here; read the standard itself before relying on a requirement. This page is guidance, not professional advice. Report an error