An Employee Stock Ownership Plan must undergo an annual financial statement audit by an independent qualified public accountant (IQPA) once it has 100 or more participants with account balances at the start of the plan year. That is the core of ESOP audit requirements under ERISA, and the audit report attaches to the plan’s Form 5500 filing with the Department of Labor.1Office of the Law Revision Counsel. 29 U.S. Code 1023 – Annual Reports Because the plan holds shares of the sponsoring employer rather than publicly traded funds, the audit examines risks a typical 401(k) never has to face, and the consequences of skipping it or getting it wrong run from daily civil penalties to plan disqualification.
When the Audit Is Required
The Department of Labor treats any plan with 100 or more participants who have account balances at the beginning of the plan year as a “large plan.” Large plans file Form 5500 with Schedule H and must attach the IQPA’s audit report.2eCFR. 29 CFR 2520.103-1 – Contents of the Annual Report3U.S. Department of Labor. Schedule H (Form 5500) Financial Information
The counting rule changed under SECURE 2.0 for plan years beginning in 2023. The count used to include every eligible employee. Now it includes only participants who actually hold an account balance, which pushed a number of borderline plans below the threshold and out of the audit requirement.
The 80-to-120 Participant Rule
Plans that sit near the line get some breathing room. If the beginning-of-year count falls between 80 and 120 and the plan filed a Form 5500 the prior year, it can continue filing in the same category it used before. A plan that filed as small last year with 95 participants can stay small even if the count drifts to 110. Once the count crosses 120, though, the plan must file as large and get an audit regardless of prior status. And once a plan files as large, it stays large until the count drops below 100.
Plans Under the Threshold
Plans below the threshold file a simplified Form 5500 with Schedule I instead of Schedule H, with no audit required. To keep the audit waiver, at least 95% of plan assets must be held by a qualifying financial institution, or the plan must carry a fidelity bond covering the nonqualifying assets. An enhanced summary annual report must also go out to participants.
Choosing the Auditor
Hiring the IQPA is itself a fiduciary act. The plan administrator or fiduciary committee has to document how and why a particular firm was chosen and show that the decision was made prudently and in the interest of participants.
Independence
Under DOL rules, the accountant cannot hold any direct financial interest or material indirect financial interest in the plan or the plan sponsor during the engagement period, the period covered by the financial statements, or at the date of the opinion.4eCFR. 29 CFR 2509.2022-01 – Interpretive Bulletin Relating to Guidance on Independence of Accountant Retained by Employee Benefit Plans The auditor cannot serve as a director, officer, or employee of the sponsor, and cannot maintain the plan’s financial records.
ESOP-Specific Experience
Independence alone is not enough. ESOP audits involve employer stock valuation, leveraged loan structures, repurchase obligations, and prohibited transaction exemptions that turn on specific conditions. An auditor who routinely handles 401(k) plans but has never worked with an ESOP can miss critical compliance issues. The AICPA’s Employee Benefit Plan Audit Quality Center requires member firms to maintain internal inspection procedures specific to ERISA audits and to have their benefit plan engagements reviewed by peer reviewers from other member firms.5AICPA & CIMA. EBPAQC Mission and Requirements Individual auditors signing ERISA opinions must also complete at least eight hours of benefit-plan-specific continuing education every three years. Selecting a firm with active EBPAQC membership is one of the simplest ways to reduce audit risk.
What the Audit Actually Examines
An ESOP audit is broader than a standard benefit plan engagement because employer stock, leveraged financing, and the participant put option each open compliance questions that do not exist elsewhere.
Employer Stock Valuation
Auditors spend more time here than on any other single area. ERISA requires that any purchase or sale of employer securities by the plan be for “adequate consideration,” defined as fair market value determined in good faith by the trustee or named fiduciary.6Office of the Law Revision Counsel. 29 U.S. Code 1002 – Definitions The DOL’s regulations tie the prohibited transaction exemption for acquiring employer securities to that same standard.7eCFR. 29 CFR 2550.408e – Statutory Exemption for Acquisition or Sale of Qualifying Employer Securities
The IQPA does not re-perform the valuation. Instead, the auditor reviews the independent appraiser’s work to decide whether the methodology is reasonable and adequately supported. That review looks at the standard valuation approaches used (income, market, and asset-based), the reasonableness of projected cash flows and the discount rate, and any discounts applied for lack of marketability or lack of control. An inflated valuation can cause the plan to overpay when buying shares from the sponsor or from departing participants, harming the remaining participants. The DOL has historically treated overvaluation as one of the most serious ESOP compliance failures.8U.S. Department of Labor. Fact Sheet – Notice of Proposed Rulemaking Relating to Application of the Definition of Adequate Consideration
Prohibited Transactions
ERISA broadly prohibits transactions between the plan and “parties in interest,” a category that covers the sponsoring employer, plan fiduciaries, service providers, and highly compensated employees. Certain ESOP transactions that would otherwise be prohibited are permitted if specific conditions are met. The most common exemption applies to the ESOP’s acquisition of employer securities under ERISA Section 408(e): the plan must pay no more than adequate consideration, and no commission can be charged to the plan.7eCFR. 29 CFR 2550.408e – Statutory Exemption for Acquisition or Sale of Qualifying Employer Securities For leveraged ESOPs, the auditor also tests the loan structure: the interest rate must be reasonable, the collateral appropriate, and the loan terms must not favor the lender at the plan’s expense. Service agreements and fees paid to fiduciaries, the ESOP trustee, the third-party administrator, and the stock appraiser are examined for reasonableness.
A transaction that fails to meet an exemption triggers an excise tax of 15% of the amount involved for each year the transaction remains uncorrected.9Office of the Law Revision Counsel. 26 U.S. Code 4975 – Tax on Prohibited Transactions If the transaction still is not corrected after the taxable period ends, an additional tax of 100% of the amount involved applies. Those taxes are paid by the disqualified person who participated in the transaction, not by the plan itself.
Participant Accounts, Vesting, and Diversification
The auditor verifies that shares and contributions were allocated to participant accounts using the formulas in the plan document. For leveraged ESOPs, that means confirming shares were properly released from the suspense account as the ESOP loan was repaid. Vesting schedules applied to terminated participants are tested so departing employees receive the correct vested percentage.
Participants who have completed at least three years of service must be allowed to diversify the portion of their account invested in employer stock that came from employer contributions, with the opportunity to move that money into other investment options at least quarterly.10eCFR. 26 CFR 1.401(a)(35)-1 – Diversification Requirements for Certain Defined Contribution Plans For amounts attributable to a participant’s own elective deferrals or rollover contributions, no service requirement applies. The auditor checks that the plan is offering these elections and processing them.
Distribution Timing
ESOP distribution rules are more complex than those for a standard retirement plan. For participants who leave due to retirement, disability, or death, distributions must begin during the next plan year after departure. For participants who leave for other reasons, the plan can delay the start of distributions for up to six years after the plan year of termination. If the ESOP still has an outstanding acquisition loan, distributions of the leveraged shares can be delayed further until the plan year after the loan is fully repaid.11Internal Revenue Service. Chapter 8 – Examining Employee Stock Ownership Plans The auditor verifies that distributions went out within these deadlines and that the amounts matched the participant’s vested balance at the applicable valuation date. Material errors here are reportable findings.
The Repurchase Obligation
When an ESOP holds stock that is not publicly traded, departing participants have the right to put their shares back to the employer. The put option must be exercisable for at least 60 days after distribution, with an additional 60-day window in the following plan year.11Internal Revenue Service. Chapter 8 – Examining Employee Stock Ownership Plans This creates a growing cash obligation for the company as the plan matures. The auditor reviews the plan’s financial statements for proper disclosure of the fair value of allocated shares and the number of allocated and unallocated shares, and looks at whether the company has the cash flow capacity to meet upcoming repurchase demands. A plan that cannot honor its put obligation is denying participants access to their retirement benefits, which is both a fiduciary failure and a qualification risk.
What the Plan Administrator Should Have Ready
Disorganized records are the single fastest way to run up audit costs. The foundation is the plan’s governing documents: the plan document, the trust agreement, any amendments, the summary plan description, and the most recent IRS determination letter. The auditor uses these to test whether the plan actually operates the way it says it does on paper.
Participant data comes next: a complete census, individual account statements, and transaction-level detail for every contribution, distribution, forfeiture, and share allocation during the plan year. Documentation of internal controls over financial reporting should be ready as well, since the auditor will assess whether those controls are reliable enough to reduce substantive testing.
The annual stock valuation report is the document that separates an ESOP audit from every other benefit plan audit. The plan administrator needs to provide the full report, including methodology, key assumptions, discount rates, and supporting financial data. Records of every stock transaction during the year matter equally: leveraged loan payments, share purchases from the sponsor, releases from the suspense account, and redemptions from departing participants. Organized records reduce substantive testing time, which reduces the bill.
The Opinion, the Filing, and the Deadline
After fieldwork, the IQPA issues a formal opinion on whether the financial statements are presented fairly under generally accepted accounting principles.1Office of the Law Revision Counsel. 29 U.S. Code 1023 – Annual Reports An unmodified (clean) opinion means the statements are materially correct. A qualified opinion signals a specific scope limitation or GAAP departure the auditor could not resolve. An adverse opinion means the statements are not fairly presented and typically draws DOL scrutiny. A disclaimer means the auditor could not obtain enough evidence to form any opinion at all.
The audit report, Schedule H, and the rest of the Form 5500 must be filed by the last day of the seventh month after the plan year ends. For a calendar-year plan, that is July 31. Filing Form 5558 before that date extends the deadline by two and a half months, moving it to October 15 for calendar-year plans.
Penalties for Late or Incomplete Filings
Missing the Form 5500 deadline or filing without the required audit report exposes the plan to penalties from both the DOL and the IRS. The DOL can impose a civil penalty of up to $2,739 per day for each day the plan administrator fails to file a complete report, with no statutory maximum.12U.S. Department of Labor. Instructions for Form 5500 The IRS separately charges $250 per day for late filings, up to a maximum of $150,000 per return.13Internal Revenue Service. 401(k) Plan Fix-It Guide – You Haven’t Filed a Form 5500 This Year These penalties run simultaneously, so a single late filing can accumulate nearly $3,000 per day in combined exposure.
The DOL’s Delinquent Filer Voluntary Compliance Program reduces the penalty significantly for plans that come forward on their own. Under the program, the basic penalty drops to $10 per day, capped at $2,000 per filing for large plans and $750 for small plans.14U.S. Department of Labor. Delinquent Filer Voluntary Compliance Program Coming forward before the DOL makes contact is almost always worth it.
Fixing What the Audit Finds
When the audit uncovers operational failures, the plan sponsor has options for correction that can preserve the plan’s tax-qualified status. The IRS Employee Plans Compliance Resolution System offers three programs.15Internal Revenue Service. EPCRS Overview
- The Self-Correction Program lets the sponsor fix certain failures without contacting the IRS or paying a fee. Available only before an IRS audit begins.
- The Voluntary Correction Program requires a fee and results in formal IRS approval of the correction method. Also available only before an audit.
- The Audit Closing Agreement Program applies once the plan is already under IRS examination. The sponsor negotiates a sanction that reflects the nature, severity, and number of affected employees, with the IRS also weighing whether the plan had internal controls designed to catch problems early.
Catching problems through the annual IQPA audit, before the IRS ever opens an examination, keeps the cheaper self-correction and voluntary correction paths open. Findings should be addressed promptly and the corrective actions documented, since that record becomes evidence of good-faith fiduciary conduct if questions come up later.