In 2019, the AICPA issued Statement on Auditing Standards (SAS) No. 136, Forming an Opinion and Report on Financial Statements of Employee Benefit Plans Subject to ERISA. SAS 136 prescribes certain new performance requirements for financial statement audits of ERISA employee benefit plans.
In addition, SAS 136 changes the form and content of the related auditor’s report. The goal is to improve audit quality while also enhancing the communicative value and transparency of the report. The statement includes new requirements for all phases of employee benefit plan audits, including engagement acceptance, performance procedures, risk assessment and response, communication with those charged with governance, and reporting.
Effective Date Delayed
Originally, SAS 136 was scheduled to become effective for audits of ERISA plan financial statements for periods ending after December 15, 2020. However, this effective date has been pushed back one year—it will now be effective for audits of ERISA plan financial statements for periods ending after December 15, 2021.
As a result, 2021 year-end audits being performed in 2022 must follow the performance and reporting requirements of SAS 136, as well as use the new form of the auditor’s report. Early adoption is permitted for 2020 year-end audits.
No More Limited Scope Audits
SAS 136 stipulates that audits will no longer be referred to as “limited scope” audits. Instead, these audits will be referred to as ERISA Section 103(a)(3)(c) audits. This is not considered a scope limitation and will no longer be considered a disclaimer of opinion.
According to the statement, an ERISA Section 103(a)(3)(c) audit is unique to employee benefit plans. Therefore, auditors will no longer issue a disclaimer opinion due to investment information that is certified by a qualified institution. Instead, the report will provide a two-pronged opinion based on the audit and the procedures performed relating to the certified investment information.
The audit report will provide an opinion on whether the information not covered by the certification is presented fairly. It will also provide an opinion on whether the certified investment information contained in the financial statements agrees with or is derived from the certification.
Additional Audit Requirements
In addition, SAS 136 contains a number of additional audit requirements, most of which have been performed by trained audit firms already, affecting the following areas:
- Engagement acceptance
- Audit risk assessment and response
- Communication with management or those charged with governance
- Forming an opinion on plan financial statements
- Form of the opinion
- Considerations relating to Form 5500 filing
The statement also requires several written representations from management, including representations that:
- Indicate management has provided the auditor with the most current plan instrument and all plan amendments.
- Acknowledge management’s responsibility for administering the plan and determining that transactions presented and disclosed in the financial statements conform with the plan’s provisions.
- Acknowledge that management’s election of an ERISA Section 103(a)(3)(c) audit does not affect its responsibility for the financial statements.
Finally, SAS 136 lists specific procedures to be performed by auditors when conducting an ERISA Section 103(a)(3)(c) exemption audit. These include the following:
- Evaluate management’s assessment of whether the entity issuing the certification is a qualified institution.
- Identify which investment information is certified.
- Obtain a representation from management that they have read the certification.
- Compare the certified investment information with the related information presented and disclosed in the financial statements and supplementary information.
- Read the disclosures related to the certified investment information to assess whether they are in accordance with the presentation and disclosure requirements of GAAP.
Start Preparing Now
Now is the time to start getting ready for the new effective date of SAS 136. By preparing well ahead of time, you’ll be less likely to encounter unexpected obstacles once the provisions become effective next year.
Got questions about your Employee Benefit Plan? We can help.
Holtzman’s team of Audit & Assurance professionals can help meet your employee benefit plan’s annual audit and filing requirements and work to protect the plan’s integrity. We are an AICPA Employee Benefit Plan Audit Quality Center Member that audits 100+ plans representing over 160,000 participants and plan assets over $4.3 billion. Our goal is to provide value throughout the employee benefit plan process, help to identify risk areas, and how to put best practices into place to support your business. Learn about our full suite of employee benefit plan services and get in touch today!
- Audit Management Letters: What You Need to Know About These Findings
- Form 5500 Requirements: What is the auditor’s responsibility?
- Common 401K Errors: Untimely Remittances of Employee Contributions
- Common 401K Errors: The Importance of Accurate Employee Census Data
- Employee Benefit Plan Audits: A Deep Dive
- Make Sure Your Annual Census Report Is Accurate
- Benefit Plan Audits: Answering Some Common Questions
- Full-scope vs. Limited-scope Audits