A firm that audits a company filing with the SEC answers to a stricter independence regime than it does for a private company. Regulation S-X Rule 2-01 sets the SEC's qualifications for accountants, and its rules differ from the AICPA Code in ways that catch firms taking on their first issuer client. A service that is permitted, with safeguards, for a private client can be flatly prohibited for an issuer.
This guide covers the main parts of Rule 2-01 that drive acceptance and continuance decisions. It paraphrases 17 CFR 210.2-01, and the rule text and the PCAOB's own independence rules control. For the standards-level overview, see the SEC auditor independence page.
The audit and professional engagement period
Rule 2-01 tests independence across the audit and professional engagement period, not at a single date. Firms evaluating a new client need to look at relationships and services across that whole period, not only at the date of acceptance. Under Rule 2-01(f)(5), the period covers both the periods of the financial statements being audited or reviewed and the period of the engagement. For a company going public, Rule 2-01(f)(5)(iii) excludes periods ended before the first day of the last fiscal year before the issuer first filed, or was required to file, a registration statement or report, provided the firm fully complied with the applicable independence standards in the earlier periods covered by any filing.
Financial relationships
Under Rule 2-01(c)(1), an accountant is not independent if the accounting firm, covered persons or their immediate family members have a direct financial interest or a material indirect financial interest in the audit client during the audit and professional engagement period. The rule gives examples such as investments, loans and certain accounts.
The intake check for a first issuer engagement is therefore a firm-wide inquiry, not an engagement team inquiry. Collect the client's securities and affiliates, then run them against the firm's covered persons and their immediate families, and document the result before the engagement letter is signed.
The ten prohibited nonaudit services
Rule 2-01(c)(4) says the accountant is not independent if, during the audit and professional engagement period, the accountant provides any of these services to the audit client. For the first five (bookkeeping, financial information systems, valuation, actuarial and internal audit outsourcing), the rule carves out a service when it is reasonable to conclude that its results will not be subject to audit procedures during the audit of the financial statements. The other five carry no such carve-out.
- Bookkeeping or other services related to the accounting records or financial statements of the audit client.
- Financial information systems design and implementation.
- Appraisal or valuation services, fairness opinions or contribution-in-kind reports.
- Actuarial services.
- Internal audit outsourcing services.
- Management functions.
- Human resources.
- Broker-dealer, investment adviser or investment banking services.
- Legal services.
- Expert services unrelated to the audit.
The first item is the one that matters most to small firms. Many CPA firms prepare the books or financial statements of their private clients, with safeguards, under the AICPA Code. For an issuer audit client, bookkeeping and financial statement services are prohibited, subject to the rule's narrow exceptions. A firm that wants to keep a bookkeeping relationship and add a public-company audit has to decide which relationship to give up before it accepts.
Valuation services need the same care. A firm that prepares a valuation used in the financial statements of an issuer audit client faces the third prohibition, and the exception depends on whether the results will be subject to audit procedures.
Contingent fees
Under Rule 2-01(c)(5), an accountant is not independent if the accountant provides any service or product to an audit client for a contingent fee or a commission, or receives a contingent fee or commission from an audit client. A fee tied to the outcome of a transaction, a tax result or the success of a financing is the usual form. The engagement letter should be checked for fee language that could be read to depend on a result.
Audit partner rotation
Rule 2-01(c)(6) limits how long audit partners can serve an issuer. The lead partner and the engagement quality reviewer cannot serve in those roles for more than five consecutive years, and other audit partners who provide audit services have a separate limit of seven consecutive years. After the limit, a time-out applies before the partner may return: five years for a lead partner or engagement quality reviewer, two years for other audit partners.
The rule provides an exemption for small firms. A firm with fewer than five audit clients that are issuers and fewer than ten partners is exempt from the rotation limits if the PCAOB reviews, at least once every three years, each audit client engagement that would otherwise breach them. The exemption covers rotation only. The five percent figure below is a different rule: a de minimis waiver of audit committee preapproval that is not tied to firm size. Because the exemption conditions turn on firm size and PCAOB inspection, the firm should document why it qualifies before relying on it.
Plan rotation at acceptance. For a firm with a limited partner bench, the rotation schedule determines whether it can keep the client over a multi-year horizon.
Audit committee preapproval
For issuers, Rule 2-01(c)(7) requires the audit committee to approve audit and nonaudit services before the accountant is engaged. The committee may approve under preapproval policies, and the rule waives preapproval for nonaudit services that total no more than five percent of the fees the client paid the accountant in that fiscal year, were not recognized as nonaudit services at engagement, and are brought to the committee and approved before the audit is complete. The firm's practical obligations are to confirm the committee has a process, to send each proposed nonaudit service through it and to keep the approval on file.
Layered rules
Rule 2-01 is not the only independence regime a firm meets. The AICPA Code applies to AICPA members and their firms, and the PCAOB has its own independence rules for registered firms auditing issuers. Differences show up on bookkeeping, partner rotation and committee oversight, so compare the three regimes service by service before accepting an issuer engagement, and apply the strictest answer. See independence and nonattest services for small firms for the private-company side.
Intake checklist for a first issuer engagement
- List every service the firm provides to the prospective client and its affiliates, and compare it to the ten prohibited categories.
- Run the financial relationship inquiry across covered persons and immediate family members.
- Review the fee terms for any contingent element.
- Determine the partner rotation schedule and whether the small-firm exemption applies.
- Confirm the audit committee's preapproval process.
- Document the conclusion before accepting.
Where CORAA fits
Independence is the firm's decision and the firm's responsibility. CORAA prepares ready-to-review audit files for US CPA firms from the client's books, and does not make independence determinations, sign reports or hold client relationships. For work on issuer engagements, the firm keeps the client, the review and the signature. See /us.
Sources
- Legal Information Institute, 17 CFR 210.2-01, Qualifications of accountants: https://www.law.cornell.edu/cfr/text/17/210.2-01
Part of CORAA University · SEC reporting and PCAOB audits: related guides, calculators and templates.
AU-C references are to AICPA Professional Standards, paraphrased here; read the standard itself before relying on a requirement. This page is guidance, not professional advice. Report an error