Audit Committee Effectiveness: What Real Oversight Looks Like

Every listed company has an audit committee, but not every audit committee is doing its job well. For accountants and finance professionals who sit on one, report into one, or advise one, understanding exactly what "effective oversight" means in practice — rather than just in the annual report boilerplate — is what separates a committee that catches problems early from one that rubber-stamps them.

What the audit committee is actually responsible for

Under the UK Corporate Governance Code 2024, which applies to companies with accounting periods starting on or after 1 January 2025, the audit committee's core remit covers four areas: monitoring the integrity of the company's financial statements, reviewing the effectiveness of internal controls and risk management systems, overseeing the relationship with the external auditor, and providing a channel for whistleblowing concerns to reach the board without being filtered by management first.

The Financial Reporting Council's Audit Committees and the External Audit: Minimum Standard (May 2023) sets out in detail what "overseeing the external auditor" should mean in practice — not just receiving the audit findings, but actively challenging the auditor's risk assessment, materiality judgements, and areas of audit focus before the audit even begins.

Composition and independence

The Code expects audit committees at premium-listed companies to be composed entirely of independent non-executive directors, with at least one member having recent and relevant financial experience. Smaller and standard-listed companies have more flexibility, but the underlying principle holds everywhere: a committee member with a personal or financial stake in the numbers being reviewed cannot provide genuine oversight of them.

Reviewing significant judgements, not just totals

The areas that separate an engaged audit committee from a passive one are almost always judgement calls rather than arithmetic: asset impairment assumptions, revenue recognition timing, provisions for legal or warranty claims, and going concern assessments. A committee that only asks "does this reconcile?" is missing the point — the real question is "why did management choose this assumption over a more conservative one, and would a different reasonable assumption change the picture materially?"

The external audit relationship

Auditor independence remains one of the most scrutinised areas of committee oversight, particularly around non-audit services. An effective committee has a clear policy on what non-audit work the external auditor can and cannot be engaged for, reviews audit fees against the scope of work agreed, and periodically tenders the audit relationship rather than allowing it to run unchallenged for a decade or more.

Whistleblowing oversight

The audit committee is typically the body responsible for ensuring arrangements exist for staff to raise concerns about financial reporting or other wrongdoing in confidence, and for satisfying itself that those concerns are followed up independently of the people they might implicate. This connects directly to the wider speak-up culture a business builds — see our guide on building a genuine whistleblowing and speak-up culture for how this plays out beyond the committee room.

Common effectiveness gaps

In practice, audit committees most often fall short in three ways: meeting only when the auditor is presenting rather than maintaining oversight year-round, treating the annual effectiveness review as a formality rather than a genuine self-assessment, and lacking the technical depth to challenge complex accounting judgements without simply deferring to management or the auditor.

FAQ

Does every company need an audit committee? All premium-listed companies must have one under the Code, and most standard-listed and larger private companies operate one as good practice even without a formal requirement.

How often should an audit committee meet? Most FTSE company committees meet at least four times a year, aligned with the financial reporting cycle, with additional meetings around year-end and interim reporting.

What CPD counts toward audit committee competence? Ongoing training in financial reporting standards, risk management, and corporate governance all count as relevant verifiable CPD for committee members and those advising them.

Strengthening your understanding of governance oversight is one of the more practical ways to build CPD hours that are directly relevant to board-level work — explore Learnsignal's Corporate Governance CPD courses or read more on why corporate governance CPD matters for finance professionals.

Assessing audit quality, not just receiving the report

The FRC's Audit Quality Practice Aid (December 2019) sets out a structured way for committees to assess audit quality beyond simply reading the auditor's own report on the engagement — asking the audit partner probing questions about how key risks were addressed, comparing the current year's findings against prior years for consistency, and seeking feedback from finance team members who worked directly with the audit team day to day. A committee that only asks the auditor to grade their own work is missing an independent check that's readily available to it.

Getting comfortable asking these questions takes practice, particularly for newer committee members without a deep audit background themselves — which is exactly the gap structured CPD in this area is designed to close.