Regulators often focus their limited resources on what they believe are the riskiest financial audits, but new research suggests that this strategy can unintentionally lead to less transparent reporting and lower overall audit quality.
A study recently published in Contemporary Accounting Research by researchers Kyungha Lee (Rutgers University) and Rahul Menon (Alberta School of Business) examines how mandatory risk disclosures and targeted regulatory inspections influence the behaviour of auditors.
In their framework, auditors evaluate and report on a company’s internal controls and financial health, while regulators selectively inspect completed audits and penalize missed flaws. Though intended to enforce accountability, this dynamic introduces a subtle conflict of interest.
The researchers found that when regulators focus their inspections on companies reporting accounting red flags – specifically, internal control weaknesses – it creates a tricky dilemma for auditors:
Ultimately, the policy encourages auditors to scrutinize the flaws they already know about, but pushes them to look the other way to avoid uncovering new ones.
"By targeting audits with weak internal control opinions, regulators are inadvertently encouraging auditors to look the other way," explains Menon.
The study reveals that the success of targeted enforcement depends heavily on a surprising factor: the level of random inspections. When a high baseline of random audits is maintained, targeted inspections can successfully boost audit quality. However, if regulators rely too heavily on targeting and let random checks slide, the overall quality of financial reports actually declines.
This creates a paradox for regulators. By focusing too much on the "usual suspects," they may discourage the very transparency they are trying to enforce.
"Our findings suggest the need to exercise caution when using audit risk disclosures as a basis for regulatory enforcement," says Menon. He notes that such targeting can make disclosures less informative for investors, as auditors become more strategic about what they reveal to avoid the regulatory spotlight.
The research also challenges the assumption that an audit disclosing an internal control weakness is always the "riskiest" one. Because auditors exert more effort to verify financial data once a weakness is identified, these audits can sometimes be more reliable than those that appear "clean" on the surface but were never subjected to rigorous substantive testing. Therefore, if regulators primarily go after companies that report problems, they might be missing the truly risky engagements.
Ultimately, the study suggests that a balanced approach — one that couples targeted scrutiny with a robust program of unpredictable, random inspections — is the more effective way to ensure companies stay honest and investors stay informed.
In a perfect world, a higher-quality audit would also lead to more informed and efficient investment. However, the study shows that the two can actually move in opposite directions. The reason for this divergence is the forewarning benefit — the value investors derive from the disclosure of internal control weaknesses. When regulators use risk disclosures to target specific audits for enforcement, auditors focus on the precision of financial data but lose the incentive to uncover and disclose internal control flaws. When the baseline of unpredictable, random checks is low, these “early warnings” provided by internal control disclosures are a vital source of information for investors. By neglecting these controls to ensure the financial data is “correct”, the auditor provides a more accurate financial statement but a less informative “early warning” report. Consequently, audit quality rises at the expense of investment efficiency.
Regulators must prioritize a strong foundation of random inspections to maintain the integrity of the entire oversight system. The study reveals that the benefits of targeted enforcement only materialize when auditors also face a high baseline of unpredictable, random checks. Without this "unpredictability factor," auditors are more likely to respond strategically by simply stopping the search for internal control weaknesses to avoid the regulator’s spotlight.
Furthermore, oversight agencies should be wary of shifting too many resources away from random inspections in favor of a strictly "risk-based" approach. When regulators operate under a tight budget, intensifying targeted inspections at the expense of random ones can paradoxically lower overall audit quality. This occurs because auditors have less incentive to be thorough on audits that appear "clean" on the surface, knowing they are unlikely to be selected for review. To maximize transparency, regulators should balance their enforcement to ensure auditors remain diligent across all accounts, not just the ones reporting trouble.
A just society is key to peace and equality. See how the U of A is striving to achieve the UN's goal of justice by championing human rights, strengthening institutions and advancing the rule of law.
Explore Our Justice WorkBecome part of our community. Get the latest news and event information from the Alberta School of Business in your inbox every month.