Auditing investments means gathering enough evidence to conclude that the financial assets shown on an entity’s balance sheet actually exist, belong to the entity, are measured correctly, and appear in the right places in the financial statements. The work is risk-heavy because investment values can move sharply, the instruments range from Treasury bonds to opaque private holdings, and management exercises real judgment in measuring them. Auditors structure the engagement around a fixed set of assertions, then select procedures calibrated to how observable each investment’s value really is.
The Five Assertions That Frame the Work
Every investment audit is organized around the implicit claims built into the financial statements. If the auditor can gather sufficient evidence for each one, the balances are likely free of material misstatement. The same framework applies to a certificate of deposit and to a complex derivative.
- Existence: the investments recorded at the reporting date were real and held by the entity.
- Rights and obligations: the entity owns the investments or holds enforceable rights to their economic benefits, without undisclosed liens or restrictions.
- Valuation and allocation: investments are recorded at the correct amount under the applicable measurement basis, whether fair value, amortized cost, or another required approach.
- Completeness: every investment and related transaction that belongs in the statements is actually there.
- Classification and presentation: investments land in the right balance sheet category, and the resulting income or value changes hit the correct income statement or other comprehensive income line.
Each assertion drives specific procedures. A gap in any one of them can ripple through the statements, so audit work is designed to cover all five for every material class of investment.
Testing That Investments Exist and Belong to the Entity
The most direct way to test existence is to ask someone outside the client. Auditors send confirmation requests to custodians, brokers, and transfer agents asking them to independently verify holdings and balances as of the reporting date. A response from an independent third party is strong evidence because the client cannot easily manipulate it.
Ownership is a separate question. The auditor inspects custodial agreements, trade confirmations, and partnership documents to confirm the entity’s legal claim to each investment. This matters most when assets sit in nominee or omnibus accounts where the client’s name does not appear on the face of the instrument. The auditor also checks for pledges, liens, or other restrictions that would limit the entity’s ability to sell or benefit from the holding.
Where investments are not held by a third-party custodian, such as private placement notes or physical certificates, the auditor inspects the original title documents directly. When bearer instruments exist, inspection happens under controlled conditions with at least two people present to prevent substitution. The auditor compares every detail on the instrument to the subsidiary ledger record.
Relying on a Custodian’s SOC 1 Report
When investments are held through a trust company or brokerage platform, the auditor usually cannot test the custodian’s internal controls directly. Instead, the auditor reviews a Service Organization Control (SOC) 1 report issued by the custodian’s own auditor. The Type 2 version covers the operating effectiveness of the custodian’s controls over a specified period, not just their design at a single point. The auditor evaluates whether the report covers the right time frame, addresses the relevant control objectives, and flags any exceptions that could affect the reliability of the custodian’s records.
Cutoff Around Period End
The auditor examines trades executed near the balance sheet date to confirm that purchases and sales landed in the correct accounting period. A trade executed on December 30 but recorded on January 3 creates a cutoff error that can misstate both the investment balance and the related income. The usual approach is to pull a sample of trade confirmations from the days immediately before and after period end and trace each one to the accounting records.
Digital Assets
Entities that hold cryptocurrency or other blockchain-based assets create a distinct existence problem. Traditional confirmation does not work when no bank or custodian will write back. For self-custodied holdings, the auditor verifies the entity’s control over the private cryptographic keys, which can involve having the entity sign a test transaction from the wallet address, confirming the on-chain balance through an independent blockchain explorer, and reviewing the key management architecture. For assets held with a third-party custodian, the approach resembles traditional confirmation, though the auditor still needs to understand whether the custodian holds segregated assets or simply owes the client a contractual right to withdraw.
Testing Valuation
Valuation is where investment audits get complicated. Many instruments must be measured at fair value, and the reliability of that measurement varies enormously depending on the inputs available. Under ASC 820, fair value inputs fall into three levels, and the audit work escalates in both difficulty and skepticism as inputs become less observable.
Level 1: Quoted Prices in Active Markets
Level 1 valuations use unadjusted quoted prices for identical assets in active markets, such as publicly traded stocks or Treasury bonds with real-time pricing on major exchanges. The auditor verifies the recorded value by independently accessing an external pricing service or published exchange data for the measurement date. This is the most reliable evidence of fair value, and the procedures are correspondingly light.
Level 2: Observable Inputs for Similar Assets
Level 2 inputs are observable but require adjustment. They include quoted prices for similar (not identical) assets in active markets, quoted prices in markets that are not active, or market-corroborated data such as interest rate yield curves and credit spreads. The auditor tests the reasonableness of the adjustments by comparing the model’s inputs against independent market data and requesting valuations from multiple pricing services to see whether they produce a consistent range.
Level 3: Unobservable Inputs
Level 3 is where audit risk concentrates. These valuations rely on the entity’s own assumptions because no meaningful market data exists. Private equity stakes, illiquid structured products, and complex derivatives frequently sit here. The entity typically builds a discounted cash flow model or uses another methodology that requires discount rates, growth assumptions, and other inputs that cannot be verified against a market quote.
The auditor works through these models layer by layer, evaluating whether the methodology conforms to the accounting framework, testing the mathematical accuracy of the calculations, and challenging each significant assumption. Discount rates get benchmarked against comparable transactions and industry data. Revenue projections get compared to historical results and economic forecasts. The auditor is specifically looking for management bias in the direction that flatters the financial statements. PCAOB Auditing Standard 2501 requires the auditor to evaluate whether each significant assumption is reasonable both individually and in combination, and for critical estimates, to understand how sensitive the result is to changes in those assumptions.1PCAOB. AS 2501 Auditing Accounting Estimates, Including Fair Value Measurements
Sensitivity analysis is a standard procedure for Level 3 instruments. The auditor changes one significant assumption at a time within a reasonable range and recalculates the fair value to see how much it moves. If a 50-basis-point shift in the discount rate swings the value by a material amount, the estimate sits in a zone where small judgment calls have big consequences. The resulting range of values helps determine whether the recorded amount is materially misstated or simply on the aggressive end of acceptable.
Disclosure Review
The valuation work finishes with a review of the fair value disclosures. The entity must disclose the hierarchy classification for each class of investment, including how assets are distributed across Levels 1, 2, and 3. For recurring Level 3 measurements, the disclosures include a rollforward reconciliation showing beginning balances, total gains and losses, purchases, sales, transfers in and out of Level 3, and ending balances. The auditor confirms these disclosures are accurate, internally consistent, and complete.
When the Auditor Brings in a Valuation Specialist
When Level 3 valuations involve modeling techniques beyond the audit team’s expertise, the auditor engages a valuation specialist. PCAOB AS 1210 requires the engagement partner to assess the specialist’s professional qualifications, relevant experience, and objectivity before relying on the work.2PCAOB. AS 1210 Using the Work of an Auditor-Engaged Specialist Objectivity involves evaluating whether the specialist or the specialist’s employer has any financial, employment, or other relationship with the client that could compromise impartial judgment. If objectivity is impaired, the auditor must either perform additional procedures to evaluate the specialist’s data and methods or engage a different specialist.
The specialist’s findings do not replace the auditor’s judgment. The auditor still reviews the specialist’s report, evaluates whether the methods used are appropriate, and confirms that the conclusions are consistent with other audit evidence. A specialist helps the auditor test the model; responsibility for the valuation conclusion stays with the auditor.
Debt Securities at Amortized Cost and CECL Allowances
Debt securities classified as held-to-maturity follow a different path. Instead of fair value, they are carried at amortized cost. The auditor recalculates the amortization of any premium or discount using the effective interest method, confirms the accuracy of the carrying amount, and verifies that management has both the intent and the ability to hold the security until maturity. The auditor also evaluates the issuer’s creditworthiness by reviewing credit ratings, recent financial statements, and any publicly available information about the issuer’s financial health.
The current expected credit loss model under ASC 326 changed how entities measure impairment on debt securities. Rather than waiting for a loss to become probable or other-than-temporary, entities estimate expected credit losses over the life of the instrument based on historical data, current conditions, and reasonable forecasts. For available-for-sale debt securities, credit losses run through an allowance account rather than a permanent write-down of the security’s cost basis.3NCUA. CECL Accounting Standards
Auditing the CECL allowance means evaluating management’s loss estimation methodology, testing whether the data inputs are accurate and complete, challenging the reasonableness of forward-looking assumptions, and checking that instruments with similar risk characteristics were appropriately grouped for collective measurement. Historical loss rates used as a starting point have to be adjusted when current conditions or supportable forecasts differ from the historical period. The subjective nature of these estimates makes CECL allowances a natural focal point for management bias, so auditors typically apply the same skeptical lens they use for Level 3 valuations.
Testing Investment Income, Gains, and Losses
Investment income testing focuses on completeness and accuracy. The auditor independently recalculates expected interest income by applying the stated coupon rate to the principal balance for the period the entity held each debt security. If the recalculated figure materially differs from what the client recorded, the auditor investigates the variance. Dividend income gets verified against published dividend records, and the auditor confirms that every expected payment was recognized in the right period. For equity investments, the auditor watches for stock splits and stock dividends, which change the number of shares held but do not produce income.
When the entity sells an investment, the auditor tests whether the reported gain or loss is correct. The procedure involves selecting a sample of sales, verifying the trade date, confirming net proceeds against broker statements, and recalculating the gain or loss by comparing proceeds to the security’s adjusted cost basis. If the entity uses specific identification to determine which lot was sold, the auditor traces that election back to documentation created at the time of the trade, not after the fact.
Wash Sales
When an entity sells a security at a loss and acquires a substantially identical security within 30 days before or after the sale, the Internal Revenue Code disallows the loss deduction. The disallowed loss is added to the cost basis of the replacement security, and the holding period of the original security carries over.4Office of the Law Revision Counsel. 26 USC 1091 – Loss From Wash Sales of Stock or Securities The auditor reviews sales activity around the balance sheet date and cross-references purchases of the same or similar securities within the 61-day window. Brokers track wash sales within a single account automatically, but entities with multiple accounts or related-party transactions can easily miss one. For tax-sensitive entities, an undetected wash sale misstates both the current-year tax provision and the cost basis of the replacement security going forward.
Getting Classification Right
Classification determines where value changes show up in the financial statements. For debt securities, three categories apply. Trading securities carry unrealized gains and losses through net income. Available-for-sale debt securities record unrealized value changes in other comprehensive income rather than the income statement. Held-to-maturity debt securities avoid fair value fluctuations because they are measured at amortized cost.
Equity securities follow different rules. Since the adoption of ASU 2016-01, most equity securities are measured at fair value with all changes flowing through net income. The old available-for-sale category no longer exists for equities. The only alternative is the measurement exception for equity securities without a readily determinable fair value, which allows an entity to record the investment at cost minus impairment, adjusted for observable price changes. The auditor confirms the entity is applying the correct framework and has not parked equity securities in a category that no longer exists.
For held-to-maturity debt securities, the auditor evaluates whether management has both the positive intent and the demonstrated ability to hold the security until maturity. If the entity has a pattern of selling securities classified as held-to-maturity before they mature, the classification becomes suspect for the entire portfolio.
Equity Method Investments
When an entity holds a significant stake in another company, generally 20% or more of voting stock, it typically accounts for the investment using the equity method. The investor records its proportional share of the investee’s income or loss rather than waiting for dividends, and adjusts the carrying amount of the investment accordingly.
The audit challenge is that the auditor now needs reliable financial information about the investee, not just the investor. If the investee is a public company with audited financial statements, the auditor can review those statements and evaluate whether the investor’s share of income was correctly calculated. If the investee is private, the auditor may need to perform procedures on the investee’s financial data or evaluate the work of the investee’s auditor.
Core procedures include recalculating the investor’s share of the investee’s income, verifying that intra-entity profits have been properly eliminated, testing the amortization of any basis differences between the investment’s cost and the investor’s share of the investee’s net assets, and confirming that the investor’s share of the investee’s other comprehensive income flows to the right place. The auditor also evaluates whether the equity method remains appropriate, since a change in ownership percentage or influence can trigger a switch to consolidation or a different measurement basis.
Fraud Risk and Required Procedures
Investments are a high-risk area for fraud because valuations often depend on management’s judgment, and that judgment is hard to independently verify. PCAOB AS 2401 requires auditors to maintain professional skepticism throughout the engagement and specifically address the risk of management override of controls.5PCAOB. AS 2401 Consideration of Fraud in a Financial Statement Audit
Three procedures are mandatory regardless of the auditor’s fraud risk assessment. First, the auditor examines journal entries and other adjustments for evidence of manipulation, paying particular attention to entries that affect investment valuations near period end. Second, the auditor performs a retrospective review of significant accounting estimates, comparing prior-year fair value estimates to subsequent actual results to look for a consistent pattern of bias in one direction. If management’s Level 3 valuations always turn out to have been optimistic when the investments are eventually sold, that pattern is a red flag. Third, the auditor evaluates the business rationale for any significant unusual transactions, such as complex structured investments entered into near year end with no clear economic purpose.
Fraud risk is highest where valuation subjectivity is greatest. Private equity holdings, illiquid debt, and complex derivatives all give management room to select assumptions that inflate reported values. The response to elevated fraud risk typically includes expanding the sample of transactions tested, engaging an independent valuation specialist, and performing more granular sensitivity analysis on management’s key assumptions.
Internal Controls the Auditor Evaluates First
Before substantive testing, the auditor evaluates the design and operating effectiveness of the entity’s internal controls over its investment activities. Strong controls reduce the risk of material misstatement and can narrow the scope of detailed testing. Weak controls do the opposite.
Segregation of duties is the foundational control. The person who authorizes investment trades should not be the same person who executes them or records them. When one individual can initiate, execute, and record a transaction without independent review, the opportunity for both error and fraud increases. The auditor maps out who performs each function in the investment lifecycle and tests whether the separation holds in practice.
A written investment policy approved by the board or an investment committee sets the boundaries: permissible instrument types, concentration limits, credit quality requirements, and the approval thresholds for individual transactions. The auditor tests compliance by selecting a sample of trades and checking whether each one falls within the policy’s parameters. Exceptions should have documented approvals, and the auditor reviews those approvals for authenticity.
Independent reconciliation is the third focus. Someone not involved in executing trades should regularly reconcile the investment subsidiary ledger to external custodian statements and the general ledger. The auditor typically re-performs a sample of these reconciliations to confirm the control is working as designed, checking that discrepancies were identified and resolved promptly.
The effectiveness of these controls shapes the audit plan. When controls are operating effectively, the auditor can rely on them and reduce the volume of substantive testing. When controls have gaps or exceptions, the auditor compensates by expanding sample sizes, performing more procedures at year end rather than at an interim date, and applying greater skepticism to management’s representations.1PCAOB. AS 2501 Auditing Accounting Estimates, Including Fair Value Measurements