InsightsArticles
Assurance & Risk Advisory

10 Audit Red Flags Every Board Should Know

Discover 10 audit report red flags management should never ignore, from KAMs and going concern warnings to qualifications, litigation and reporting inconsistencies.

By Kavita Sharma••7 MIN READ

An audit report arrives. Management reads the opinion paragraph: “unmodified.” Relief. The report is filed. The board receives a summary: “clean opinion received.”

The report contained four signals that nobody read because nobody looked past the opinion paragraph. A KAM describing significant estimation uncertainty in a Rs 40 crore goodwill balance. An Emphasis of Matter paragraph drawing attention to a material litigation exposure. A reference to a prior-period qualification that was resolved through a restatement. And an Other Matter paragraph noting that the component auditor of a subsidiary used a different materiality threshold.

Each signal, individually, is manageable. Collectively, they describe a set of financial statements that is more fragile, more judgment-dependent and more sensitive to future developments than the “clean opinion” summary suggests. The management team that ignores these signals is managing the business on incomplete information.

The 10 red flags inside an audit report

Red flag 1: A KAM involving revenue recognition. Revenue recognition is a KAM when the auditor assessed significant risk in how revenue is measured, timed or classified. The KAM tells the reader: the reported revenue depends on management judgments (percentage of completion, variable consideration, contract modification, principal-versus-agent assessment) that the auditor tested extensively. The revenue is accepted, but it rests on assumptions. If the assumptions change, the revenue changes.

Management action: review the KAM description. Understand which specific judgments the auditor tested. Assess whether the business conditions that supported those judgments are still present. If they are changing, the next period’s revenue recognition may produce a different outcome.

Red flag 2: A KAM involving impairment assessment. Goodwill, intangible assets, investments in subsidiaries and joint ventures, and fixed assets in underperforming segments all require impairment testing. When the auditor describes this as a KAM, the auditor is signalling: the carrying value of the asset depends on management’s projections of future cash flows. The projections were tested and found reasonable. But projections are forward-looking. If actual performance falls below the projected performance, the impairment trigger is crossed and the asset must be written down.

Management action: compare the actual performance against the projections used in the impairment model. If actual revenue is 10% below projection after two quarters, the headroom in the impairment test is shrinking. Management should re-run the impairment test with updated inputs rather than waiting for the next year-end.

Red flag 3: A going concern paragraph (Material Uncertainty Related to Going Concern). This is the most serious non-modification signal in the entire audit report. The auditor is saying: the company may not survive the next 12 months. The disclosure is adequate (which is why the opinion is unmodified), but the uncertainty is real.

Management action: treat this as a crisis-level alert. The going concern paragraph triggers covenant reviews by lenders, rating downgrades by agencies, enhanced scrutiny by regulators and investor exit decisions. Management must actively demonstrate progress on the plans disclosed in the going concern note. If the plans are not working, the next audit report may not have an unmodified opinion.

Red flag 4: An Emphasis of Matter on litigation or regulatory proceedings. The auditor is highlighting a legal or regulatory exposure that, while properly disclosed, is significant enough to warrant special attention. The litigation could produce a liability that changes the company’s financial position materially.

Management action: ensure the provision (if any) is adequate and the disclosure is current. Monitor the litigation’s progress. If the probability of an adverse outcome increases, the provision must be updated without waiting for the year-end.

Red flag 5: A qualification on a specific balance. The auditor found a misstatement that management did not correct. The qualification tells the reader exactly which balance is affected and by how much. The rest of the financial statements are reliable. This one balance is not.

Management action: correct the misstatement as soon as possible. A qualification that persists into the next period becomes a recurring qualification, which suggests management is unwilling to address a known problem. Recurring qualifications erode credibility with lenders, investors and regulators.

Red flag 6: A qualification for scope limitation. The auditor could not verify a balance because evidence was not available or access was not provided. The qualification tells the reader: this balance might be correct, but the auditor could not confirm it.

Management action: determine why the evidence was unavailable and ensure it is available for the next audit. If the limitation was management-imposed (deliberately or through negligence), the auditor’s assessment of management integrity is affected, which may have consequences beyond the current opinion.

Red flag 7: A reference to a component auditor. The group auditor relied on the work of a component auditor (typically for a subsidiary or a branch) and has disclosed this reliance. The reference does not modify the opinion, but it tells the reader that the group auditor did not directly audit a portion of the financial statements. The quality of the component audit is assumed but not independently verified by the group auditor (unless the group auditor performed additional procedures).

Management action: understand which components are audited by separate auditors and whether those audits are conducted to the same quality standard as the group audit. A subsidiary audited by a small local firm to a lower standard may have issues that the group auditor’s report does not capture.

Red flag 8: An Other Information section noting inconsistency. SA 720 requires the auditor to read the “other information” in the annual report (the directors’ report, the management discussion and analysis, the corporate governance report) and assess whether it is materially inconsistent with the financial statements. If the auditor identifies an inconsistency, the Other Information section of the audit report describes it.

Management action: resolve the inconsistency. A directors’ report that describes “robust growth of 25%” when the audited financials show 8% growth is a credibility problem. The inconsistency tells the reader that someone, either the directors’ report or the financial statements, is not telling the full story.

Red flag 9: A prior-period modification referenced in the current report. The audit report references a qualification or an adverse opinion from the prior period that has been resolved (or that persists). A resolved prior-period qualification tells the reader that the company had a financial statement problem last year. A persistent qualification tells the reader that the problem was not fixed.

Management action: if the prior-period modification is resolved, ensure the resolution is documented and the current-period financial statements reflect the correction. If the modification persists, the management team must explain to the board, the lenders and the investors why a known problem has not been addressed.

Red flag 10: Multiple KAMs in the same area. An audit report with two KAMs in the same area (for example, revenue recognition and trade receivables, which are interconnected) tells the reader that the financial statements have a concentration of audit risk in one domain. The revenue and the receivable are two sides of the same transaction: if the revenue recognition is aggressive, the receivable quality is suspect.

Management action: when KAMs cluster in one area, treat the area as a strategic risk, not just an audit risk. The concentration suggests that the financial statements’ reliability depends heavily on management judgments in that specific area. Strengthen the controls, the oversight and the independent review in that area.

[email protected] | +91 92899 25657

Private Mandate Advisory Desk

Executing a High-Stakes Transaction or Investigation?

Northrop partners provide independent financial due diligence, fraud forensics, and enterprise turnaround advisory with complete board-level confidentiality and institutional rigor.

Confidential NDA scoping
NCLT & SEBI audit-ready
48h execution response
K

Kavita Sharma

Related Practice Expertise

Relevant Services for Assurance & Risk Advisory

Explore All Services

Transaction & Due Diligence Advisory

Quality of earnings, debt-like items, and balance sheet normalization for cross-border acquisitions.

Consult Practice Lead

Forensic Accounting & Investigations

Asset tracing, IBC Section 66 transaction audits, and RBI regulatory forensic defense.

Consult Practice Lead
Documented Track Record

Explore Proven Mandate Execution Case Studies

View Case Studies
Advisory Desk
48h Scoping

Need Guidance on Assurance & Risk Advisory?

Northrop senior partners advise boards, funds, and corporate leadership on high-stakes transactions, forensic audits, and regulatory compliance.

Strict NDA & confidentiality guaranteed
Senior Practice Partner oversight
NCLT & SEBI audit-ready standards
Book Consultation
Institutional Track Record
US$ 6B+
Diligence Scoped
₹400 Cr+
Forensic Recoveries
Explore All Advisory Practices