March 2, 2026
Key developments (short summary)
- Stronger ATO scrutiny of auditors — the ATO has published a targeted compliance program and lists specific areas it will review (market valuations, audit documentation, independence, SAN misuse).
- Regulator enforcement by ASIC — ASIC has suspended, cancelled or imposed conditions on multiple SMSF auditor registrations for breaches of professional obligations.
- Litigation precedent — recent cases have found auditors negligent where they failed to make reasonable enquiries about asset recoverability or to qualify reports when evidence was insufficient.
- Commercial pressure on fees — low‑fee audit models are widespread; the ATO and commentators note fee data and the risk that compressed fees can correlate with weaker audit procedures.
Where the biggest legal and regulatory risks come from
- Insufficient audit evidence for asset values — auditors must verify market values and retain supporting evidence; failure to do so can trigger modified reports, ACRs, referrals and civil claims.
- Poor documentation and file quality — inadequate working papers make it hard to defend audit judgments in reviews or litigation.
- Independence and SAN misuse — breaches here attract regulatory action and can lead to disqualification or registration cancellation.
- Accepting high‑risk engagements at low fees — when fees don’t reflect the work required, auditors may cut procedures or fail to escalate issues, increasing exposure to claims.
Practical controls to reduce exposure (what auditors should do)
- Fee discipline — set fees that reflect the time needed for robust valuation checks, compliance testing and documentation.
- Documented valuation procedures — require independent market evidence, third‑party valuations where appropriate, and clear file notes explaining valuation judgments.
- Quality management system — standardised checklists, supervisory review, peer review and periodic internal file sampling.
- Clear engagement letters and scope limits — define responsibilities, deliverables, and circumstances that will trigger a qualified IAR or ACR.
- Maintain and evidence independence and CPD — keep records of independence checks, professional indemnity cover, and continuing professional development.
- Escalation and refusal policies — a written policy to decline or withdraw from engagements where evidence is insufficient or trustee conduct prevents proper audit work.
What disqualification or regulator action looks like
- ATO trustee disqualification — the ATO can disqualify trustees for serious or repeated contraventions; auditors should be alert to trustee conduct that may trigger ATO action.
- ASIC action against auditors — ASIC can cancel registration, impose conditions, or disqualify auditors for breaches such as lack of practical experience, non‑compliance with auditing standards, or failure to lodge annual statements.
Short checklist you can apply this week
- Review three recent files for valuation evidence and independence checks.
- Compare your average audit fee to the time actually required; adjust pricing or scope where necessary.
- Update engagement letters to include explicit triggers for qualification or withdrawal.
- Run a peer review on one high‑risk file and document supervisory sign‑offs.
Takeaway: Adequate fees, rigorous valuation evidence, strong documentation and a clear escalation policy are the single most effective ways to reduce regulatory and litigation risk for SMSF auditors.
