Securities Regulation Daily Wrap Up, PCAOB NEWS AND SPEECHES—PCAOB posts Q&A to help auditors implement new quality control standard, (Aug 18, 2026)
The resource addresses QC 1000, which will go into effect in December, but does not touch on proposed amendments that the Board issued for public comment in June.
The PCAOB has posted a Q&A resource to assist auditors with the implementation of QC 1000, A Firm’s System of Quality Control, which will go into effect December 15. The document presents the staff’s views, which have not been approved by the full Board. The staff noted that the Q&A does not address the provisions of the proposed amendments to QC 1000 that the PCAOB issued in June.
The staff advised that QC 1000 will not be applied retrospectively from and after December 15, 2026. An audit firm may choose to adopt QC 1000 early, with the exception of reporting on Form QC.
The staff indicated that if a firm plays a substantial role in another firm’s engagement, the firm is required to design, implement, and operate a QC 1000-compliant quality control system. However, if a firm performs less than a substantial role in another firm’s engagement, then its compliance depends on whether it performs other work subject to QC 1000. If it does, then it must have a quality control system that applies to all of its work, including when it assists in less than a substantial role. If a firm is not otherwise involved in engagements defined in QC 1000, then it is not required to operate a quality control system for work performed at less than a substantial role.
External individuals. The staff addressed the question of how a firm should determine whether external individuals used in a firm’s quality control system are considered firm personnel or other participants. The staff cited the definition of “firm personnel,” which states that individuals such as non-employee contractors and consultants that work under the firm’s supervision or direction and control and function as employees of the firm are considered firm personnel.
The staff acknowledged, however, that not every non-employee contractor or consultant that works under the firm’s supervision or control would function as the firm’s employee. That assessment should be based on the individual’s functional role rather than the legal form of the relationship, the staff said.
When determining whether the individual works under the firm’s supervision or control, the staff noted that relevant considerations could include, among others:
Whether the firm controls or has the right to control what work the individual does for the firm and directs how the individual performs the work;
Whether the firm controls what assignments the individual works on;
The duration of the arrangement with the individual to perform work;
Whether the individual only performs work on a discrete assignment or on multiple assignments for the firm; and
Whether the firm directs or controls the financial and business aspects of the individual’s work, such as how he or she is paid and what expenses are reimbursed.
Risk and response. QC 1000 includes procedures for firms to address a quality risk with a response that outlines how the firm intends to handle the risk. In the Q&A guidance, the staff confirmed that each quality risk identified by the firm must have at least one response. The response may include both specified quality responses—those mandated by the PCAOB and written directly into QC 1000—and firm-designed responses.
The staff advised that QC 1000 establishes no hierarchy between specified and firm-designed quality responses—both are important to an effective quality control system and operate together. The staff warned that specified quality responses alone will not be sufficient to enable the firm to achieve all established quality objectives.
Intentional misconduct. The staff stated that there is no requirement in QC 1000 that a firm identify the risk of intentional misconduct. The concept of intentional misconduct would be evaluated the same as any other risk, the staff noted, so a quality risk would exist when an outcome has at least a reasonable possibility of occurring and a reasonable possibility of adversely affecting the firm’s achievement of one or more quality objectives.
The staff suggested that if a firm is aware of misconduct at other firms through news reporting or enforcement cases, it may want to consider whether such misconduct could also be present at the firm and what quality objectives could be affected, and then modify its quality risks accordingly.
The Q&A document also addresses questions in the following areas: ethics and independence, people and technological resources, information and communication, the monitoring and remediation process, evaluation and reporting, and documentation.
RegulatoryActivity: AccountingAuditing RiskManagement