PCAOB Scales Back on Quality Management: What It Means for ISQM 1
This article will count 0.25 units (15 minutes) of unverifiable CPD. Remember to log these units under your membership profile.
QC 1000 is the US quality control standard for audit firms. It applies to firms registered with the Public Company Accounting Oversight Board (PCAOB), the regulator that oversees audits of listed companies in the United States. It replaces interim standards that had been in place since 2003. The approach will look familiar: set quality objectives, identify the risks to those objectives, design responses, then monitor the system and fix what is not working. Firms must also evaluate the system annually and report the outcome to the regulator. It is, in short, the American cousin of ISQM 1.
After adopting targeted amendments to QC 1000, on 10 September the US Financial Accounting Standards Board issued an update that changes how investment companies measure fair value. Neither one binds a South African practice, it merely gives an indication to us on where global standard setters are heading.
What the PCAOB review actually covered
The PCAOB adopted QC 1000 in 2024 and then postponed the effective date by a year. Firms pushed back on cost and operability. The board reopened the standard in June 2026 and asked for comment on narrow amendments. This month it adopted them. Four things changed:
The external quality control function is gone. This had required the largest audit firms to appoint independent outside oversight of their quality control systems. The board rescinded it. Board member George Botic disagreed publicly, noting the requirement only ever applied to five firms.
The design-only requirement is gone. QC 1000 will now apply only to firms that are required to comply with applicable professional and legal requirements for an actual engagement. Firms that registered but perform no in-scope work no longer have to build a system for work they are not doing.
The definition of a QC deficiency is narrower. Where a firm has put more than one response in place to address the same quality risk, those compensating responses can now be taken into account when deciding whether a deficiency exists.
Firms choose their own annual evaluation date. The date on which a firm evaluates the effectiveness of its system is now a firm decision rather than a fixed date.
What did not change is the effective date. QC 1000 still takes effect on 15 December 2026, subject to approval by the US Securities and Exchange Commission. The stated aim of the amendments is better alignment with other quality management standards and lower compliance cost, without weakening investor protection.
The FASB change, in plain terms
Funds sometimes buy shares they are not allowed to sell for a period, such as a lock-up after a listing. Until now, US rules said to ignore the lock-up and value those shares at the ordinary market price. Investors told FASB this was wrong. You cannot sell the shares, so they are not worth the same as shares anyone can trade today. The result was that the fund's total value looked too high, performance looked better than it was, and management fees, which are charged as a percentage of that value, came out too high as well. It also meant investors cashing out were paid more than their share was really worth, at the expense of those who stayed in. The new rule says the restriction must be factored into the value, and the fund must disclose how much value that restriction took off.
Why this matters to your practice
ISQM 1 has not been amended. The IAASB has made no matching change, so nothing in your quality management file becomes optional this month. Your annual evaluation obligation still stands.
What changed is the argument. For three years the standard setting message was that quality management systems must be comprehensive. The PCAOB has now conceded that parts of its own version were disproportionate. That gives you a defensible position when you scale your system to your firm. ISQM 1 was always risk based and scalable, as covered in our introduction to ISQM 1. Scalable does not mean thin. It means matched to the risks you actually carry.
The FASB update is worth noting for a different reason. It is a reminder that fair value is a live area, and that the IFRS and US GAAP accounting standards are keep drifting apart in the detail. If you report under IFRS for SMEs, your fair value work is about to change anyway when the new Section 12 framework comes in, as we set out in Fair Value Finally Makes Sense.
What to do this week
Pull out your quality management documentation and check two things. First, that every response you have documented is a response you can show evidence of operating. Second, that your monitoring and remediation process has a date attached to it and an owner. Those two points are where quality reviews fail, and no amendment anywhere changes that.
Then tell your clients what you are doing. A firm that can explain its own quality system is a firm that can charge for the assurance it provides.
👉 Join CIBA and we'll show you how to build a quality management system that fits your firm and stands up to review.
