How to Select an Audit Firm: Criteria for Choosing an IPO Auditor in the US Market

The selection of a lead audit firm for a US IPO has shifted from a procedural checklist item to a high-stakes strategic decision, driven by the Public Company Accounting Oversight Board’s (PCAOB) enforcement trajectory and the SEC’s evolving stance on non-US issuers. In 2024, the PCAOB imposed 24 sanctions against audit firms, a 41% increase year-over-year, with a notable focus on firms auditing Chinese companies listed in New York. For Hong Kong-based issuers and their sponsors, the calculus is no longer merely about cost or brand recognition; it is about navigating the PCAOB’s complete access regime under the Holding Foreign Companies Accountable Act (HFCAA) and the SEC’s heightened scrutiny of auditor independence under Rule 2-01 of Regulation S-X. A misstep here can delay a registration statement’s effectiveness by months or, in the case of a deficient audit opinion, trigger a delisting proceeding. This article establishes the technical, regulatory, and operational criteria for selecting a US IPO auditor, grounded in the specific mechanics of the NYSE and NASDAQ listing processes.

The PCAOB Access Mandate and Jurisdictional Compatibility

The single most important criterion for any issuer seeking a US listing is that its audit firm must be registered with and subject to inspection by the PCAOB. This requirement, codified in Section 106 of the Sarbanes-Oxley Act of 2002, became a litmus test for Chinese companies after the HFCAA’s passage in 2020. As of January 2025, the PCAOB maintains full access to inspect audit work papers in mainland China and Hong Kong, a status that can be revoked by the SEC if the PCAOB determines it cannot conduct inspections. Issuers must verify that their chosen auditor has not been subject to a PCAOB “non-cooperation” finding in the preceding three years.

Confirming PCAOB Registration and Inspection History

A potential auditor must provide its PCAOB registration number and a summary of its last two inspection reports. The PCAOB publishes these reports publicly, and issuers should review Part I findings—those that identify audit deficiencies—for patterns. For example, in 2023, the PCAOB’s inspection of a mid-tier firm auditing several China-based SPAC targets found that 35% of the audits reviewed contained deficiencies in revenue recognition testing under ASC 606. An issuer should request the auditor’s response letter to Part I findings, which is filed with the PCAOB but not always publicly indexed. The SEC staff, during the comment letter process for the Form F-1 registration statement, will specifically inquire about any unresolved PCAOB findings.

Jurisdiction and the “Home Country” Auditor Rule

The SEC does not require an issuer to use a US-based auditor. A Hong Kong or PRC-based firm that is PCAOB-registered is permissible. However, the SEC’s Division of Corporation Finance, in its 2024 guidance on non-US issuers, clarified that it expects the auditor to have a physical office and licensed staff in the jurisdiction where the issuer’s principal operations are located. For a Cayman Islands holding company with operating subsidiaries in Hong Kong and Shenzhen, the audit firm must demonstrate it can perform on-site work at those subsidiaries. The SEC has rejected requests to rely solely on a US-based audit team for a Hong Kong operating entity without a local office presence, citing the PCAOB’s requirement for direct access to local personnel and records under AS 1201.

Technical Competence in US GAAP and SEC Reporting Standards

The audit firm must demonstrate deep, demonstrable expertise in US Generally Accepted Accounting Principles (US GAAP) and the SEC’s financial reporting requirements. This is distinct from proficiency in Hong Kong Financial Reporting Standards (HKFRS) or International Financial Reporting Standards (IFRS). While a reconciliation from IFRS to US GAAP is permitted under Item 17 of Form 20-F for certain foreign private issuers, most IPOs on the NYSE or NASDAQ require financial statements prepared in accordance with US GAAP under Item 18. The auditor must be able to opine on the reconciliation itself, which is a complex area.

ASC 606, ASC 842, and Industry-Specific Standards

The auditor’s track record with specific accounting standards is critical. For a technology company with multi-element software arrangements, the audit team must have experience applying ASC 606 on revenue from contracts with customers, including the identification of performance obligations and variable consideration. For a real estate or logistics company, ASC 842 on leases is a primary focus area. The SEC staff has issued over 200 comment letters in 2024 alone specifically requesting further disaggregation of revenue under ASC 606 for IPO-stage companies. The issuer should request the auditor’s internal guidance materials or training records on these specific standards to gauge depth.

Experience with Form F-1 and the Comment Letter Process

The audit firm’s experience in responding to SEC staff comment letters is a non-negotiable operational criterion. A firm that has not shepherded a client through the SEC’s review process may underestimate the level of documentation required for critical accounting policies. The SEC’s Division of Corporation Finance, in its 2023 review of 100 first-time F-1 filers, issued an average of 4.2 comment letter rounds per registration statement. Each round can take 30-45 days to resolve. The auditor must be prepared to draft detailed technical memoranda on the application of US GAAP to specific transactions, which the issuer’s legal counsel will submit as part of the comment letter response. The issuer should ask for examples of such memoranda from the auditor’s prior IPO engagements.

Independence, Quality Controls, and the “Cooling Off” Period

Auditor independence under SEC Rule 2-01 and the AICPA Code of Professional Conduct is a strict, non-negotiable requirement. The SEC has intensified enforcement in this area, with a 2024 settlement against a mid-tier firm for providing prohibited bookkeeping services to an audit client during the period covered by the financial statements. For a Hong Kong issuer, the independence analysis must extend to the auditor’s provision of tax advisory, valuation, and internal audit services to the issuer’s BVI, Cayman, and PRC subsidiaries.

The “Cooling Off” Period for Former Audit Partners

A critical but often overlooked requirement is the “cooling off” period under SEC Rule 2-01(c)(8). If a former audit partner of the proposed firm has been employed by the issuer in a financial reporting oversight role—such as CFO, controller, or chief accounting officer—within the 12 months preceding the commencement of audit procedures, the firm is not independent. This is a one-year cooling off period. The issuer must conduct a thorough employment history check of its senior finance team against the audit firm’s partner roster for the preceding 24 months to ensure compliance. The SEC staff will request this information in the first comment letter if it is not voluntarily disclosed in the Form F-1.

Quality Control System and PCAOB AS 1201

The audit firm’s system of quality control must comply with PCAOB Auditing Standard 1201. The issuer should request a copy of the firm’s most recent internal inspection report, which is separate from the PCAOB inspection. This report should show the results of the firm’s own engagement quality control reviews (EQCRs) for IPO engagements. A firm with a high rate of “significant deficiency” findings in its internal EQCRs for IPO-stage clients is a risk factor. The audit engagement partner must have completed the PCAOB’s required continuing professional education (CPE) on independence and ethics in the last year, with a minimum of 8 hours in that specific area.

Operational Fit and Timeline Management

The audit firm must have the operational capacity to meet the tight timeline of a US IPO. The average time from the initial filing of a Form F-1 to effectiveness for a non-US issuer in 2024 was 6.2 months, according to data from the SEC’s EDGAR system. The audit of the three most recent fiscal years—required for a US IPO—must be completed and the audit opinion issued before the registration statement can be declared effective. Any delay in the audit process directly pushes back the entire listing timeline.

Resource Allocation and Engagement Team Composition

The issuer should negotiate a detailed resource plan that specifies the number of senior associates, managers, and partners assigned to the engagement. The audit firm must commit to a single engagement partner who will be the primary point of contact for the SEC comment letter process. The issuer should request the resumes of the proposed engagement team, focusing on their specific experience with US GAAP and SEC reporting for companies in the issuer’s industry. A firm that staffs an IPO engagement primarily with junior staff who have no prior SEC experience is a red flag.

Coordination with the Underwriter’s Due Diligence

The audit firm must be prepared to participate in the underwriter’s due diligence sessions, which typically involve a “comfort letter” under AU 634 and a “bring-down” letter at closing. The auditor must be able to provide negative assurance on the financial statements and a review of the issuer’s financial information in the prospectus. The issuer should confirm that the audit firm has a dedicated team for handling underwriter requests, including the preparation of the required SAS 100 (now AU-C 920) letters. The timeline for issuing the comfort letter is typically 2-3 weeks before the effective date, and the auditor must commit to that schedule in writing.

Closing Takeaways

1. Verify the audit firm’s PCAOB registration number and review its two most recent inspection reports for Part I deficiencies, specifically those related to revenue recognition and internal controls over financial reporting.
2. Ensure the audit firm can demonstrate a track record of responding to SEC staff comment letters on Form F-1 registration statements, with an average resolution time of fewer than four rounds.
3. Confirm that no former audit partner of the proposed firm has been employed by the issuer in a financial reporting oversight role within the preceding 12 months to maintain independence under Rule 2-01(c)(8).
4. Negotiate a detailed resource plan that commits the audit firm to a specific engagement team with US GAAP and SEC experience, including a single engagement partner for the duration of the IPO process.
5. Require the audit firm to provide a written timeline for the completion of the three-year audit, the issuance of the comfort letter, and the bring-down letter, with clear penalties for delays that impact the registration statement’s effectiveness.