Standard Practice. Archives

The manual is thick. The policies are complete. A partner oversees independence, the firm conducts an annual inspection, and every process has a sign-off page. On paper, the firm appears to have quality under control.

Then the same inspection finding returns for the third year.

“We fix the documentation, we don’t fix the problem,” Meredith Mednick, CPA, CA, says in a recent episode of Standard Practice.

PCAOB QC 1000 is designed to address that recurring failure. Effective December 15, 2026, the standard replaces the PCAOB’s interim quality control framework with a risk-based system. Firms must do more than maintain policies. They must show their responses address real risks and work as intended.

Start with risk, not the quality manual

The PCAOB adopted its interim quality control standards in 2003 from AICPA standards that predated the Board. Those standards created a useful baseline, but they were largely prescriptive and static: establish policies, document them, and update them when needed.

They didn’t require a system that learned from its failures. Inspection findings continued to show supervision problems, independence gaps, and weak evidence over complex estimates, even when firms had policies and training in place.

QC 1000 replaces that model with a three-step process:

Establish quality objectives: What should good quality look like at this firm?
Identify and assess quality risks: What could keep the firm from reaching those objectives?
Design quality responses: What targeted actions will reduce those risks to an appropriately low level?

Firms must assess quality risks annually and respond when their circumstances change. A new industry, merger, technology platform, or loss of key personnel may change the firm’s risk profile.

In Meredith’s example, the fictional Clearview Audit Group adds 12 healthcare issuer clients. That growth introduces risks involving revenue recognition, regulation, and specialists. Clearview must update its quality responses before issuing its first healthcare audit report.

“The manual is the output,” Meredith explains. “The risk-based analysis is the input.”

That analysis supports the standard’s central goal of providing reasonable assurance that engagements follow professional and legal requirements and that reports are appropriate in the circumstances.

Eight components must work together

The risk assessment process feeds eight integrated components:

Risk assessment
Governance and leadership
Ethics and independence
Acceptance and continuance
Engagement performance
Resources
Information and communication
Monitoring and remediation

These aren’t separate checklists. A staffing problem can affect engagement performance. A weak reporting culture can undermine monitoring. Outdated technology can create risks across the system.

Governance makes that integration personal. The firm’s principal executive officer, the highest-ranking executive regardless of title, is ultimately accountable for the QC system. Firms must also name one person with operational responsibility for each of three areas: the overall QC system, ethics and independence, and monitoring and remediation. One person may hold several roles, but each role must have one owner.

Firms that issued reports for more than 100 issuers during the prior year must also provide confidential, anonymous channels for complaints and allegations. As adopted in 2024, the standard also required these firms to establish an external QC function to evaluate significant judgments in the annual QC assessment, but the PCAOB voted in September 2026 to rescind that requirement, subject to SEC approval.

Daily audit decisions become quality-control decisions

The standard goes beyond firm leadership. It changes decisions made before and during an engagement.

Independence is an active process. Firms must maintain restricted-entity lists and communicate additions at least monthly. Personnel review them at defined trigger points, such as joining the firm, acquiring an investment, changing roles, or entering a business relationship. The standard requires ethics training near the start of employment and at least annually. Firms above the 100-issuer threshold must automate the process for identifying investments that may impair independence.

Client continuance becomes a quality filter. Firms must consider the integrity and ethical values of management and the audit committee, not only whether the firm has the skills to perform the work. They also need a documented response when they discover, after accepting or continuing an engagement, information that would have caused them to decline it.

Resources include time and technology. Engagement teams need competence, objectivity, and enough time to do the work. AI-assisted tools and third-party platforms must also have suitable capacity, reliability, resilience, and security. Methodologies and templates must be current and used in practice, not left as “wallpaper” on the intranet.

These engagement-level decisions feed the system’s most important feedback loop.

Root-cause analysis must lead to a tested fix

QC 1000 requires engagement monitoring and system-level monitoring. At minimum, firms inspect one completed engagement for each engagement partner on a cyclical basis. Selection must include unpredictability. Firms above the 100-issuer threshold must also monitor in-progress engagements.

When monitoring identifies a QC deficiency, the firm must determine why it happened. Was the cause inadequate training, poor staffing, outdated methodology, weak supervision, failed technology, or a culture that discouraged questions?

The response must address that cause. In the Clearview example, deficiencies involving estimates appear across three issuer audits. Root-cause analysis shows that the firm’s methodology was not updated after the estimates standard changed. The answer is not another generic training session. Clearview must update the methodology, train its people, and monitor later engagements to confirm the fix works.

Work backward from September 30

Each year, firms evaluate their QC systems as of September 30 and reach one of three conclusions: effective with no unremediated deficiencies; effective except for deficiencies that aren’t major; or not effective because major deficiencies exist.

The firm reports its conclusion to the PCAOB on nonpublic Form QC by November 30. The principal executive officer and the person responsible for the QC system certify the filing. The firm must assemble its final QC documentation by December 14 and retain it for seven years. Since we recorded, the PCAOB adopted targeted amendments on September 9, 2026. If the SEC approves them, they would take effect with QC 1000 on December 15, 2026, let each firm choose its own annual evaluation date instead of September 30 (with Form QC due within 60 days after that date), shorten documentation retention to five years, and allow the specified QC roles to be divided among several people or assigned to non-firm personnel.

To prepare, firms should:

Conduct a real gap analysis across all eight components
Assign and communicate accountability roles now
Make monitoring support root-cause analysis, not just list findings
Schedule required work by counting backward from your evaluation date
Map existing ISQM 1 or SQMS 1 programs to QC 1000’s distinct requirements
Track SEC approval of the targeted amendments the PCAOB adopted on September 9, 2026

A thick manual can’t prove audit quality. A working system can. Listen to the full Standard Practice episode to hear Meredith’s complete walkthrough and consider which part of your firm’s QC system needs attention first.

On September 9, 2026, the PCAOB adopted amendments to QC 1000, three months before they take effect. This is a companion to episode two, PCAOB QC 1000, A Firm’s System of Quality Control, covering the recent changes.

Two companies operate in the same industry, under similar conditions, in the same year. One includes share-based payment expense in operating profit; the other excludes it. One includes a goodwill impairment; the other presents it below that line. Both comply with IFRS, yet investors end up “comparing apples to oranges,” Blake Oliver, CPA, said on an episode of Standard Practice.

IFRS 18 was created to address that problem. Host Meredith Mednick, CPA, CA, walked through the new standard with Blake. His first reaction to replacing IAS 1 fell “somewhere between mild panic and deep curiosity.”

Issued in April 2024, IFRS 18 applies to annual periods beginning on or after January 1, 2027. It doesn’t change when companies recognize transactions or how they measure them. Instead, it changes how they present and disclose financial performance. That may sound limited, but the implementation work isn’t.

Operating profit gets a standard foundation

Under IAS 1, companies had broad discretion over how they classified income and expenses and the subtotals shown above profit or loss. Most presented operating profit, but there was no standard definition of what belonged in it.

IFRS 18 introduces five required categories for income and expenses:

Operating
Investing
Financing
Income taxes
Discontinued operations

Operating is the residual category. You first ask whether an item belongs in one of the other four categories. If it doesn’t, it is operating. As Blake explained, “If it doesn’t meet the criteria for another category, it’s operating, full stop.”

That means a company can’t remove a cost from standardized operating profit simply because it is large, volatile, or unusual. For example, restructuring costs remain in operating even if management considers them one-time charges. A gain or loss on production machinery also goes to operating, although the related cash proceeds may appear in investing activities under IAS 7.

That distinction is important because the investing and financing categories under IFRS 18 don’t match the categories with the same names in the cash flow statement.

Classification follows the economics

Although IFRS 18 reduces presentation choices, it doesn’t eliminate judgment. Instead, accountants must determine how an asset or liability produces its return or cost.

The investing category includes specified income and expenses from associates, joint ventures, unconsolidated subsidiaries, cash and cash equivalents, and other assets that generate returns individually and largely independently of the company’s other resources. Dividends or fair value gains from listed shares may qualify. Depreciation on a delivery fleet doesn’t qualify because those vehicles work with employees, warehouses, and other operating resources.

The financing category focuses on liabilities. Its treatment depends on whether a liability arises only from raising finance:

Bonds, bank loans, and similar financing arrangements can place several related gains and expenses in financing
Trade payables, leases, pension liabilities, and provisions generally place only separately identified interest and interest-rate effects in financing

For example, current service cost on a defined benefit plan is operating, while separately identified net interest is financing. Foreign exchange differences generally follow the underlying item: FX on a supplier payable is operating, while FX on a bond payable is financing. Limited relief allows operating classification when allocation would require undue cost or effort, but inconvenience alone is not enough.

Once IFRS 18 establishes those general rules, it adds an important exception for certain business models.

Core financial activities may stay in operating

Investing in assets or providing financing to customers may be a company’s main business activity. This can apply to investment entities, investment property companies, insurers, banks, other lenders, and manufacturers that finance customer purchases.

These entities may have to include items that would normally fall under investing or financing in operating. Otherwise, a lender’s operating profit could exclude the interest spread at the center of its business.

This is a fact-based assessment rather than an accounting policy choice. Evidence may include gross-profit-style measures such as net interest income and information reported under IFRS 8. The assessment also occurs at each reporting level. A subsidiary and its consolidated parent can reach different conclusions, creating a need for consolidation adjustments.

Once you settle those classifications, the new statement structure begins to take shape.

New subtotals and disclosures improve comparability

IFRS 18 introduces two key subtotals: operating profit and profit or loss before financing and income taxes. The second combines operating profit with the investing category, allowing users to compare performance before financing costs and taxes.

An exception applies when an entity provides financing to customers as a main business activity and elects to classify in operating the income and expenses from all its finance-raising liabilities, including those unrelated to customer financing. It can’t present a subtotal labeled “before financing” because that description would be misleading.

Companies may still communicate adjusted measures, such as operating profit before restructuring costs. However, qualifying management-defined performance measures used in public communications will require disclosures in the financial statements. Blake described this as bringing non-GAAP measures into the statements “in a controlled and transparent way.”

IFRS 18 also requires the analysis of operating expenses to appear in the statement of profit or loss by nature, function, or a mix. If the financial statements present expenses by function, the footnotes must also disclose key nature amounts, including employee benefits (including share-based payments), depreciation, amortization, impairments, and inventory write-downs, by function. Companies should use labels like “other” only when they don’t have a more informative description available.

These changes lead directly to the most urgent issue of timing.

The practical deadline arrives before year-end 2027

IFRS 18 applies retrospectively. For a company with a December year-end, that means:

They must apply IFRS 18 to their 2027 annual statements
They must restate their 2026 comparative statement
The financial statements must present a reconciliation from the previous IAS 1 presentation
Its first 2027 interim report must already use IFRS 18 headings and subtotals and include the required comparative reconciliation

As Meredith warned, implementation must be “substantially completed before the first interim financial reporting date of the adoption year, not just before the annual year-end.”

Start by assessing main business activities at every reporting level. Then map each income and expense item to a category, identify data gaps, review your expense presentation, inventory externally reported performance measures, and plan the required systems, training, and consolidation changes.

IFRS 18 doesn’t change what a company earns. It changes how clearly financial statement users can understand and compare that performance. For the full classification walkthrough and implementation discussion, listen to the Standard Practice episode.

How to prove your quality control system works under PCAOB QC 1000