Glossary/Government, nonprofit and ERISA

ERISA Section 103(a)(3)(C) audit (limited-scope audit)

An ERISA 103(a)(3)(C) audit, formerly called a limited-scope audit, lets the administrator instruct the auditor not to audit investment information certified by a qualified institution such as a bank or insurer.

CORAA TeamUpdated November 5, 2026

Definition

ERISA Section 103(a)(3)(C) allows a plan administrator to instruct the auditor not to perform procedures on investment information prepared and certified by a qualified institution, such as a bank, trust company, or regulated insurance company. The certification must state that the information is complete and accurate. The older term for the engagement was a limited-scope audit. Under AU-C 703, the auditor's report still gives an opinion on the financial statements and describes the certified information that was not audited.

Why it matters in an audit or review

The auditor does not test the certified investments, but still reads the certification, evaluates whether the certifying institution qualifies, tests whether the certified information agrees with the statements and the reporting, and audits everything else, including contributions, benefit payments, and participant data. The report must explain the exclusion, and the plan financial statements still include the certified amounts.

Example

Illustrative: a plan holds all investments at a bank trustee that certifies the balance and activity. The administrator instructs the auditor to exclude those investments. The auditor tests contributions, distributions, and loans, and the report explains the exclusion.

Common mistakes

Treating the certified amounts as outside the audit entirely, without testing agreement with the financial statements.

FAQ

Is this a qualified opinion?

Under AU-C 703, not solely because of the instruction. The report explains the limitation without modifying the opinion for it.

Sources

  • ERISA section 103(a)(3)(C), 29 U.S.C. 1023(a)(3)(C)
  • 29 CFR 2520.103-8 and 2520.103-5, limited exemption for certain plan assets held by regulated institutions
  • AICPA, AU-C Section 703, Performing and Reporting on an Audit of Employee Benefit Plans Subject to ERISA (SAS 136)

Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error

Standards

AU-C 703

Related terms

  • ERISA 401(k) plan audit
    An ERISA 401(k) audit is the annual audit of a plan's financial statements by an independent qualified public accountant, required for plans filing as large plans and attached to the Form 5500.
  • Form 5500
    Form 5500 is the annual return and report that employee benefit plans file with the DOL, IRS, and PBGC, and for large plans it must include the independent auditor's report on the plan financial statements.
  • Independent auditor's report
    The independent auditor's report is the signed document in which the auditor states an opinion on the financial statements, with sections for the opinion, basis for opinion, and each party's responsibilities.

Go deeper

All glossary terms →

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required