How the Accounting & Auditing Industries Work

The accounting and audit industry is heavily regulated to ensure the reliability of financial reporting and the integrity of services. Multiple layers of regulation exist – from laws and government agencies to independent oversight boards and professional bodies – often with coordination globally. Below is an overview of how the industry is regulated, with focus on the U.S., Europe, and key Asian countries, as well as the roles of prominent regulatory and standard-setting bodies.

United States

In the U.S., regulation of accounting and auditing is robust and multifaceted:

• Securities and Exchange Commission (SEC): The SEC is the federal agency overseeing U.S. capital markets. It has ultimate authority over financial reporting for public companies. The SEC requires public companies to file audited financial statements and has rules governing auditor independence and qualifications. The SEC also oversees the key audit regulator (PCAOB) and can take action against auditors for misconduct (in addition to companies themselves). For instance, the SEC can bar individuals or firms from auditing public companies if they violate securities laws. The SEC recognizes accounting standards set by FASB for U.S. GAAP and mandates that auditors follow standards approved by the PCAOB. In essence, the SEC is the top-level guardian of financial reporting quality in the U.S.
• Public Company Accounting Oversight Board (PCAOB): Created by the Sarbanes-Oxley Act of 2002, the PCAOB is a nonprofit corporation with regulatory power over audits of public companies. It registers audit firms, sets auditing and quality control standards, inspects audit firms (both U.S. and foreign firms that audit U.S.-listed companies), and can discipline auditors. The PCAOB has introduced its own Auditing Standards (which began largely from adopted AICPA standards and expanded post-SOX) that auditors of U.S. public companies must follow. The PCAOB conducts regular inspections of the Big Four and many other firms – publishing reports on deficiencies. Its enforcement can result in fines or bans. The PCAOB operates under SEC oversight (the SEC approves its rules and appointments). In recent years, the PCAOB has focused on areas like improving auditors’ work on fraud detection and new auditing issues (e.g., crypto assets), and it reached a long-sought agreement with Chinese authorities in 2022 to inspect China-based audit work of U.S.-listed companies after years of tension. PCAOB standards and inspections have significantly raised audit quality and accountability for public company audits in the U.S., and the PCAOB model has influenced other countries to strengthen oversight.
• Financial Accounting Standards Board (FASB): FASB is the designated private-sector body that sets U.S. Generally Accepted Accounting Principles (GAAP). It operates under the oversight of the Financial Accounting Foundation (FAF) and is recognized by the SEC as the accounting standard-setter. FASB periodically issues Accounting Standards Updates that become part of GAAP, which all public (and many private) companies follow for financial reporting. While not a regulator in the enforcement sense, FASB’s standards define what audited financial statements should contain, so its role is foundational. U.S. GAAP differs from International Financial Reporting Standards (IFRS) in some areas, but there has been convergence on several key standards over the past decade. Compliance with GAAP is enforced by the SEC for public companies and by lenders or other stakeholders for private companies.
• American Institute of CPAs (AICPA) and State Boards: The AICPA sets auditing standards for private company audits (through its Auditing Standards Board) and ethical standards for CPAs, which are often adopted by state accountancy boards. It also administers the CPA exam and provides CPE. State Boards of Accountancy license CPAs and can discipline accountants for malpractice or ethical breaches. While the PCAOB covers public company audits, the AICPA’s generally accepted auditing standards (GAAS) apply to audits of private companies, nonprofits, and governments (alongside government-specific standards). Many GAAS were aligned with PCAOB standards through the “Clarified” ISAs, but some differences remain. State boards enforce codes of conduct and have legal authority at the state level.
• Internal Revenue Service (IRS) – for Tax: In tax practice, the IRS and Treasury Department set tax regulations that tax practitioners must follow. There is also a body called the IRS Office of Professional Responsibility that can sanction tax advisors (including CPAs) for unethical conduct in tax practice (Circular 230 rules). While not an accounting regulator per se, the tax authority’s rules shape tax services.

Overall in the U.S., the combination of federal oversight (SEC/PCAOB) for audits, private standard-setters (FASB, AICPA) for standards, and state-level licensure for individuals creates a comprehensive regulatory environment. U.S. regulatory focus in the past two years includes proposed rules for increased disclosure (e.g., the SEC’s proposed climate risk disclosure rules) which would indirectly require auditors to cover new information, continued PCAOB emphasis on audit firm accountability, and discussions about audit firm governance (though no move to break up firms like in some other countries). Litigation risk also acts as a de facto regulator in the U.S., as class action lawsuits and liability concerns pressure audit firms to maintain high standards to avoid multimillion-dollar settlements.

Europe (EU, UK, and Others)

Europe’s regulatory framework is somewhat fragmented by country but guided by EU-wide regulations (for EU member states) and influential national regimes:

• European Union Audit Regulation and Directive: In response to audit failures (like Parmalat, and later the financial crisis), the EU implemented an Audit Regulation and Directive in 2014 (effective from 2016) that harmonize audit rules across member states. Key provisions include mandatory audit firm rotation for public-interest entities (PIEs) after 10 years (extendable to 20 with joint audits or 24 in some cases) to prevent over-familiarity, and restrictions on non-audit services that audit firms can provide to their audit clients (with a black list of prohibited services and a cap on allowed non-audit service fees). Each member state has an audit oversight body (e.g., Germany’s APAS, France’s H3C, etc.) usually under the coordination of a committee at the European level. The Committee of European Auditing Oversight Bodies (CEAOB) facilitates cooperation among national inspectors. The EU also adopted IFRS Standards for listed company financial statements since 2005, so IFRS is essentially the accounting framework, overseen by the European Securities and Markets Authority (ESMA) for enforcement coordination. In practice, this means audits in Europe follow International Standards on Auditing (ISAs as issued by IAASB, adopted in most countries), and financials follow IFRS, both under a regulatory umbrella that enforces auditor independence and rotation. Recent EU focus has been on strengthening audit quality and competition – for example, after the Wirecard scandal in Germany (2020), there were calls for tighter oversight and even a move towards more joint audits (requiring two audit firms for one large company) to diversify the market beyond the Big Four. The new Corporate Sustainability Reporting Directive (CSRD) passed in 2022 will also require auditors to provide assurance on sustainability information starting in limited form and moving to reasonable assurance, bringing new regulatory scope to the industry.
• United Kingdom: The UK, no longer in the EU, has been pursuing its own audit reforms following high-profile failures (Carillion, Thomas Cook, etc.). The Financial Reporting Council (FRC) has been the regulator overseeing audit (setting UK auditing standards largely based on ISAs, monitoring audit quality, and regulating accountants and actuaries). The UK government announced plans to replace the FRC with a stronger regulator, the Audit, Reporting and Governance Authority (ARGA), with expanded powers. The UK already requires audit partner rotation every 5 years and had adopted similar non-audit service caps as the EU when it was a member. Additional proposals (some dubbed “UK SOX”) will likely require directors to personally certify internal controls and auditors to be more explicit about detecting fraud, etc.. The UK has also pressured the Big Four to “operationally separate” their audit and consulting practices by 2024 to reduce conflict of interest – meaning governance and financial independence of the audit division, although not a full break-up. The Companies Act and oversight by the Competition and Markets Authority (CMA) also shape auditor appointments and market structure. Accounting standards in the UK for listed companies are IFRS (for others, UK GAAP which is similar to IFRS for SMEs). The UK accounting profession is also self-regulated in parts by bodies like ICAEW, but statutory oversight lies with FRC/ARGA.
• Other European Countries: Each has its audit regulator, often aligned with EU law. For example, Germany – Auditor Oversight Body (APAS) under the Federal Office of Economics and Export Control; France – H3C; Netherlands – AFM; etc. These regulators license auditors of public companies and inspect audit quality. Europe also hosts the International Ethics Standards Board for Accountants (IESBA) code of ethics adoption via the EU framework, which means strict independence rules. In financial reporting, European countries either use IFRS (for consolidated listed accounts) or local GAAP for others, with bodies like EFRAG (European Financial Reporting Advisory Group) advising the EU on IFRS endorsement and now developing ESRS (European Sustainability Reporting Standards) under CSRD. So, regulation is multi-tiered: EU-level regulations + national enforcement.

The European regulatory trend in the last couple of years centers on sustainability and expanded audit scope. With climate and ESG disclosures becoming mandatory (e.g., the EU Taxonomy, CSRD requiring assurance), regulators are drawing accounting firms into non-traditional assurance. Also, calls for audit market competition persist; in some cases, governments considered forcing joint audits or splitting firms (though nothing materialized yet akin to EY’s global attempt). The profession in Europe is under a watchful eye to restore public trust (“audit to prevent the next Wirecard”).

Asia (China, India, Japan and others)

Regulatory regimes in Asia’s major economies have unique features, often blending local standards with international convergence:

• China: The accounting and audit profession in China is overseen by the Ministry of Finance and the Chinese Institute of CPAs (CICPA). Auditing standards in China are largely converged with ISAs, and accounting standards (Chinese ASBE) are substantially converged with IFRS. However, regulation has a strong state influence. The Ministry of Finance and other regulators (like the China Securities Regulatory Commission, CSRC) supervise audit firms, especially those auditing state-owned enterprises (SOEs) and listed companies. In 2023–2024, China signaled tighter control over foreign accounting firms: reports emerged that authorities instructed state companies to phase out using Big Four auditors for security reasons, aiming to boost local firm capacity and protect data sovereignty. Additionally, after corporate scandals (e.g., Evergrande’s massive fraud), the Ministry of Finance increased scrutiny of Big Four audit work, demanding more documentation and conducting rigorous inspections. China has set up a new regulatory body in 2023 (the National Financial Regulatory Administration) consolidating financial oversight, which likely will also have a say in audit practices. Chinese regulators also coordinate with the U.S. PCAOB for cross-border listings inspections – a breakthrough agreement in 2022 allowed PCAOB access to inspect China-based audit files, a significant change after years of impasse. Thus in China, we see an environment where the state is heavily involved: the government can dictate audit market structure (favoring locals), and severe penalties can be imposed on auditors for failures (including legal action). The CICPA handles CPA licensing and exam, while the Ministry sets rules; independence standards are also strictly enforced by regulation.
• India: India’s audit regulation has been undergoing reform. Traditionally, the profession was self-regulated by the Institute of Chartered Accountants of India (ICAI) which issues accounting standards (Ind AS for converged IFRS, and AS for others) and auditing standards (aligned with ISAs). However, after corporate scandals like Satyam (2009) and IL&FS (2018), India established the National Financial Reporting Authority (NFRA) as an independent audit regulator for public interest entities. NFRA, operational since 2019, oversees auditing standards enforcement for large companies, conducts inspections/investigations, and can sanction auditors. It effectively diminishes the exclusive self-regulatory domain of ICAI for big cases. The Securities and Exchange Board of India (SEBI) also influences audit requirements for listed companies (e.g., mandatory audit partner rotation every 5 years, and firm rotation every 10 years, similar to EU). Foreign audit firms can’t operate directly in India, so the Big Four work through affiliates; this has led to regulatory scrutiny (there were temporary bans on firms in the past over rule violations). On accounting, India converged many standards to IFRS (called Ind AS) for listed and large companies, while others use a local GAAP; these standards are set by the Accounting Standards Board under ICAI, but must be notified by the Ministry of Corporate Affairs. Key bodies include the ICAI (professional body), NFRA (independent oversight), SEBI (market regulator), and the MCA (government ministry) – collectively ensuring auditors and accountants uphold standards. In the past two years, NFRA has begun issuing audit inspection reports and penalizing some auditors, indicating a maturation of independent oversight.
• Japan: The Financial Services Agency (FSA) is Japan’s government regulator overseeing audits of financial statements for listed companies, with support from the Certified Public Accountants and Auditing Oversight Board (CPAAOB) for audit inspections. The Japanese Institute of CPAs (JICPA) is the self-regulatory body that issues audit standards (largely adopting ISAs with some modification) and ethical rules, and administers the CPA exam. Japan historically used Japanese GAAP, which is set by the Accounting Standards Board of Japan (ASBJ); since mid-2010s, it allows some companies to report under IFRS (and some under U.S. GAAP) – offering multiple frameworks. In practice, many large companies have adopted IFRS voluntarily. Audit firm rotation is not mandatory in Japan, but audit partner rotation is. The FSA/CPAAOB conducts regular inspections akin to PCAOB. After incidents like the Olympus accounting fraud (2011) and Toshiba’s accounting issues (2015), Japan tightened oversight. The JICPA can discipline members, but serious cases go to the CPAAOB and FSA for enforcement. In recent years, Japan has been working on integrating sustainability reporting (with some companies early-adopting ISSB standards) and ensuring auditors are prepared for that. Japan’s regulatory style is typically less punitive than the U.S. but has become stricter on ensuring adequate audits for investor protection.
• Other Asian Markets:
  • Hong Kong: Has the Financial Reporting Council (recently renamed the AFRC) regulating auditors of listed entities, separate from the HKICPA. Hong Kong uses IFRS (branded HKFRS) and ISAs, and because it hosts many Chinese company listings, it coordinates closely with mainland regulators.
  • Singapore: The Accounting and Corporate Regulatory Authority (ACRA) oversees auditors and sets standards (adopting ISAs and IFRS-like standards). ACRA conducts practice monitoring of audit firms and issues transparency reports.
  • Australia (not Asia proper, but Asia-Pac): Has a robust regime with ASIC overseeing audit firms, the Financial Reporting Council (not to be confused with UK FRC) overseeing accounting standards (set by the AASB, which aligns with IFRS), and the AUASB for auditing standards (aligning with ISAs).

In Asia, a notable trend is convergence with global standards: many countries have adopted IFRS or close equivalents and ISA-based auditing standards, often via IFAC membership obligations. The International Auditing and Assurance Standards Board (IAASB), under IFAC, reports that about 130 jurisdictions use or are committed to using its International Standards on Auditing. This means the technical underpinnings in many Asian audits are similar to those in the West. Where differences lie is in oversight rigor and enforcement. China is unique in its nationalist approach recently; India is strengthening independent oversight; others like Singapore and Australia are at the forefront of rigorous regulation comparable to the U.S./EU.

Roles of Major Regulatory and Standard-Setting Bodies

In addition to country-specific regulators, several international bodies shape the rules of the game globally:

• International Federation of Accountants (IFAC): IFAC is a global umbrella organization for the accountancy profession, comprising over 180 member organizations (like AICPA, ICAEW, ICAI, JICPA, etc.). IFAC itself doesn’t regulate by law but through membership obligations it promotes high standards. Under IFAC, independent standard-setter boards set the international standards: the IAASB for auditing and assurance, the International Ethics Standards Board for Accountants (IESBA) for ethics and independence, and the International Accounting Education Standards Board (IAESB) for education standards. These boards’ standards (ISAs, the IESBA Code, etc.) become effective when adopted in different jurisdictions. IFAC, through these boards, has been pivotal in global harmonization – e.g., most countries use the IESBA Code of Ethics as the basis for their independence rules (which, for instance, require auditor rotation on engagements, prohibit certain non-audit services, etc.). IFAC also works with regulators via the Monitoring Group to ensure these standards serve public interest.
• International Auditing and Assurance Standards Board (IAASB): IAASB sets International Standards on Auditing (ISAs), which cover the audit of financial statements, and standards for other assurance and quality control. Its standards are used directly or indirectly in a majority of jurisdictions. For example, the EU essentially requires use of ISA-based standards. The IAASB has in the last two years been active in new areas: it released a new suite of quality management standards effective 2022-23 to improve firm-wide audit quality control, and it is developing an International Standard on Sustainability Assurance (ISSA 5000) for assurance on ESG reporting. In 2023, it also approved a separate standard for Less Complex Entity audits to simplify requirements for small company audits. While IAASB has no enforcement power, its standards become enforceable when adopted by laws or regulators in a country. The PCAOB in the U.S. is separate (its own standards), but PCAOB often monitors IAASB developments. Coordination is high; for instance, many IAASB board members come from Big Four or national regulators, ensuring practicality.
• International Accounting Standards Board (IASB): Under the IFRS Foundation, the IASB issues IFRS Accounting Standards which over 140 countries use for public company reporting. The IASB’s standards (like IFRS 15 Revenue, IFRS 16 Leases, etc.) define how transactions are reported. While not an audit regulator, IASB/IFRS profoundly influence the work of accountants and auditors globally. The IFRS Interpretations Committee and collaboration with bodies like FASB aim to keep accounting standards globally as aligned as possible. Lately, the IFRS Foundation also created the International Sustainability Standards Board (ISSB), which in 2023 released IFRS S1 and S2 – standards for sustainability disclosures (general and climate-specific). These are anticipated to be adopted across many markets, further expanding what accountants need to report and assure.
• Public Sector Accounting and Auditing: Bodies like the International Public Sector Accounting Standards Board (IPSASB) under IFAC issue standards for government accounting (IPSAS), and the International Organization of Supreme Audit Institutions (INTOSAI) issues public sector auditing guidelines. While this may be tangential to corporate audit, firms that audit or advise governments interact with these standards. For example, a firm helping a country adopt accrual IPSAS will use those guidelines.
• Regulatory Coordination Groups: The International Forum of Independent Audit Regulators (IFIAR) is a global assembly of audit oversight regulators (PCAOB, FRC, etc.) that share inspection findings and push for improvements collectively. IFIAR’s reports often highlight common audit deficiencies worldwide (like inadequate professional skepticism, or insufficient challenge of management estimates), indirectly influencing firms to address these issues globally. There’s also the Monitoring Group (with IOSCO, Basle Committee, etc.) that oversees how standards are set at IFAC (leading to reforms like creating a new umbrella foundation IFAA – mentioned in IAASB’s report – to enhance governance of standard-setting).

In summary, the regulatory framework is multi-layered. In major markets: U.S. relies on SEC and PCAOB for audits and FASB for accounting, emphasizing investor protection and rigorous enforcement; Europe uses a combination of EU rules and national bodies, emphasizing audit independence and now ESG, with IFRS as accounting norms; Asia varies but largely converges to international standards with local adjustments, and some (China, India) infusing stronger state oversight recently. Across all, bodies like IAASB and IASB provide the technical standards backbone, while organizations like PCAOB, NFRA, and FRC enforce and adapt those standards locally. The last five years have seen regulators focus on restoring trust (due to corporate failures), adapting to technological changes (e.g., guidance on use of AI, data analytics in audit), and expanding the scope of corporate reporting (sustainability/ESG) that accountants must deal with. The interplay of these regulatory and standard-setting bodies ensures the accounting and audit industry operates under public interest mandates, despite being run by private firms – balancing the need for innovation and advisory growth with the non-negotiable duty of high-quality, ethical auditing and accounting practice.