PCAOB AS 1000 Auditor Responsibilities: What Changed and What to Do Now
If your company has a December 31 fiscal year-end, your auditors are conducting the first audit under PCAOB AS 1000 right now. The results will appear in your 2026 annual report. This is not a future compliance question.
AS 1000, General Responsibilities of the Auditor in Conducting an Audit, was adopted by the PCAOB on May 13, 2024 and approved by the SEC on August 20, 2024 (SEC Release No. 34-100773). It supersedes five legacy interim standards that had been sitting largely unchanged since 2003. For CFOs, audit committee members, and compliance officers, the question is not whether AS 1000 applies. It does. The question is what it changes in practice and what you should do about it.
Key takeaway: AS 1000 does not invent new auditor obligations, but it does sharpen them, codify engagement partner accountability with new specificity, compress the documentation window by 69%, and establish investor protection as the interpretive lens for every other PCAOB standard.
What Is PCAOB AS 1000 and What Did It Replace?
AS 1000 consolidates 21 years of interim standards into a single, modernized foundational standard. The five standards it supersedes are:
| Superseded Standard | Subject |
|---|---|
| AS 1001 | Responsibilities and Functions of the Independent Auditor |
| AS 1005 | Independence |
| AS 1010 | Training and Proficiency of the Independent Auditor |
| AS 1015 | Due Professional Care in the Performance of Work |
| AS 2815 | The Meaning of "Present Fairly in Conformity with GAAP" |
These were originally adopted on an interim basis when the PCAOB was established under Sarbanes-Oxley, drawn from pre-existing AICPA standards. They were never significantly updated. Over two decades, the auditing environment changed substantially: new PCAOB standards layered on top, independence requirements evolved, and data analytics and automated audit tools became standard practice. AS 1000 reflects all of that.
The PCAOB's framing is deliberate: it called AS 1000 the "foundation of every audit." That positioning matters, because the investor-protection mandate in paragraph .01 now carries interpretive weight across the entire PCAOB standards corpus, not just within AS 1000 itself.
Is AS 1000 Already in Effect for Your Audit?
Yes, for most public companies. AS 1000 is effective for audits of financial statements for fiscal years beginning on or after December 15, 2024. For calendar-year-end companies, that means fiscal year 2025 is the first audit conducted under AS 1000, with auditor reports issued in early 2026.
The one exception involves the 14-day documentation completion rule (discussed below). That specific requirement has a tiered effective date based on firm size:
| Firm Size | 14-Day Documentation Rule Effective Date |
|---|---|
| Firms issuing audit opinions for more than 100 issuers (calendar year 2024) | Fiscal years beginning on or after December 15, 2024 |
| All other registered firms (100 or fewer issuers) | Fiscal years beginning on or after December 15, 2025 |
If your company is audited by a smaller registered firm, your auditor may still be operating under the old 45-day documentation window for fiscal year 2025. Confirm which rule applies before making assumptions about post-audit file access timelines.
For quarterly reviews, the 14-day rule kicks in with the first quarter ending after the first financial statement audit covered by the requirement. For calendar-year companies audited by large firms, that means Q1 2026 reviews are already subject to the 14-day rule.
The Investor-Protection Mandate: New Language, Real Interpretive Weight
Paragraph .01 of AS 1000 opens with a statement that did not exist in this form before: "The auditor has a fundamental obligation to protect investors through the preparation and issuance of informative, accurate, and independent auditor's reports. This responsibility transcends an auditor's relationship with management and the audit committee of the company under audit, providing the foundation for an objective and independent audit."
A note to that provision adds: "The auditor's obligation to protect investors provides important context to the auditor's work when applying the requirements of this and other PCAOB standards and rules."
The PCAOB was explicit that this does not create a new legal duty for auditors. The investor-protection principle is longstanding; AS 1000 simply makes it the explicit interpretive frame for everything else. But that framing has practical consequences. When the PCAOB evaluates auditor conduct in inspections or enforcement actions, paragraph .01 now provides the overarching standard against which professional judgment calls are measured. Auditors who prioritize management's preferred accounting treatment over investor-protective skepticism have less room to argue they were acting within the spirit of the standards.
For audit committees, this framing reinforces a point worth raising directly with your engagement partner: whose interests does the audit ultimately serve?
Engagement Partner Responsibilities Under AS 1000: What Actually Changed
This is the most operationally significant change for audit committees and CFOs, and the one most underexplained in public commentary.
Prior standards addressed engagement partner responsibilities in a diffuse way across multiple standards. AS 1000 paragraph .10 consolidates and codifies them in a single provision. Under due professional care, the engagement partner is now explicitly responsible for:
- Appropriate assignment of responsibilities to, and supervision of, engagement team members
- Determining that the audit is properly planned and performed to obtain reasonable assurance
- Evaluating that significant findings or issues are appropriately addressed
- Determining that significant judgments and conclusions are appropriate and supported by sufficient appropriate audit evidence
- Determining that required communications under applicable professional and legal requirements have been made
None of these are genuinely new obligations. What is new is that they are now stated with this specificity in a single standard, which means PCAOB inspectors have a cleaner checklist against which to evaluate partner conduct, and audit committees have a clearer basis for their own oversight conversations.
For audit committees, the practical implication is straightforward: paragraph .10 gives you a framework for holding the engagement partner accountable, not just the firm. If a significant finding was not escalated, if a judgment call was not adequately supported, or if a required communication was delayed, paragraph .10 is now the standard against which that failure is measured.
See our 2026 PCAOB Inspection Guide for how PCAOB inspectors are applying these standards in the current inspection cycle.
Professional Skepticism and Due Professional Care: Modernized Definitions
AS 1000 updates the definitions of the core auditing concepts that underpin every audit procedure. These are not cosmetic changes.
Due professional care (paragraph .09) is now defined as "acting with reasonable care and diligence, exercising professional skepticism, acting with integrity, and complying with applicable professional and legal requirements." The prior AS 1015 language has been streamlined and made more precise.
Professional skepticism (paragraph .11) is defined as "an attitude that includes a questioning mind and a critical assessment of audit evidence and other information that is obtained to comply with PCAOB standards and rules." This definition reflects two decades of PCAOB inspection findings that identified skepticism failures as a root cause of audit deficiencies. The PCAOB has consistently found insufficient skepticism in areas like revenue recognition, going concern, and management estimates.
Competence (paragraph .07) is now defined as "having the knowledge, skill, and ability that enable the auditor to perform their assigned activities in accordance with applicable professional and legal requirements and the firm's policies and procedures," measured both qualitatively and quantitatively. A note specifies that competence includes knowledge of accounting and auditing standards, SEC rules and regulations relevant to the company being audited, and the related industry or industries. This is more granular than the prior AS 1010 definition and has direct implications for how firms staff engagements.
For CFOs and audit committees, these definitions matter because they are the standards against which auditor conduct is evaluated in PCAOB inspections and enforcement proceedings. If your auditor accepts management's estimate without adequate challenge, the question is whether that constitutes a failure of professional skepticism under paragraph .11.
The 14-Day Documentation Rule: What It Means Beyond the Headline
AS 1000 compresses the audit documentation completion window from 45 days to 14 days after the report release date, a 69% reduction. The PCAOB's stated rationale is twofold: reducing the window for improper alteration of audit documentation, and enabling the PCAOB to begin the inspection process sooner after audit completion.
For a detailed breakdown of the rule's mechanics and firm-size thresholds, see our dedicated piece on the PCAOB's 14-day audit documentation rule. Here, the focus is on what the rule means for your organization.
Three practical implications CFOs and general counsel should consider:
- Post-audit file requests. If your company requests access to audit workpapers after the report date (for example, in connection with a restatement, a regulatory inquiry, or litigation), the file must be finalized within 14 days. Any request made after that window should find a complete, frozen file. This is actually a protection for issuers, not just a burden on auditors.
- Restatement scenarios. If a restatement is identified after the 14-day window closes, the audit documentation cannot be altered. The auditor must create new documentation for any additional procedures. This has implications for how restatements are investigated and how the original audit is evaluated.
- PCAOB inspection readiness. The shorter window means PCAOB inspectors can access completed audit files sooner. Firms with documentation gaps or incomplete workpapers at the 14-day mark face greater inspection exposure. As a company, you have an indirect interest in your auditor's documentation discipline: inspection deficiencies at your audit firm can affect audit quality and, in some cases, the firm's registration status.
AS 1000 also clarifies that documentation must identify who performed the work, who reviewed the work, and the date of such review. This specificity enhancement has direct implications for engagement quality control and PCAOB inspection readiness.
Independence and the Dual-Regulator Reality
AS 1000 paragraphs .04 through .06 update the independence requirement in a way that makes explicit what practitioners already knew: auditor independence is governed by two regulators simultaneously.
The prior AS 1005 addressed independence in general terms. AS 1000 now states directly that the auditor must satisfy the independence criteria in PCAOB rules and standards AND the independence criteria in SEC rules and regulations. Both sets of requirements apply, and both are named.
This matters for companies with complex auditor relationships, non-audit services, or recent auditor changes. If your company is considering engaging your audit firm for consulting, tax, or advisory services, the dual-regulator independence framework is the starting point for that analysis. The SEC's independence rules under Regulation S-X and the PCAOB's own ethics standards both apply, and AS 1000 now makes that explicit in the foundational standard.
AS 1000 in the Broader PCAOB Reform Context
AS 1000 is not a standalone event. It is part of a coordinated PCAOB modernization agenda under Docket 049, running alongside several other significant standard changes that finance teams need to track together.
The most directly relevant companion standard is QC 1000, the PCAOB's new quality control framework, which is effective for registered firms beginning December 15, 2025. QC 1000 governs how audit firms design, implement, and evaluate their quality control systems. AS 1000's engagement partner accountability provisions and QC 1000's firm-level quality requirements are designed to work together: AS 1000 sets what the partner must do; QC 1000 governs the firm infrastructure that supports it.
The PCAOB is also pursuing ongoing work on noncompliance with laws and regulations (NOCLAR), which would expand auditor responsibilities for identifying and reporting illegal acts. AS 1000's investor-protection framing in paragraph .01 provides the philosophical foundation for that expansion.
For a full picture of the PCAOB's 2026 inspection priorities and how these standards interact in practice, see PCAOB 2026 Inspection Priorities: What's Actually Changing and the QC 1000 audit committee readiness checklist.
What to Ask Your Engagement Partner About AS 1000
No ranking article on AS 1000 provides this. Here are the questions audit committees and CFOs should be putting to their engagement partner in 2026, grounded directly in the standard's provisions.
On investor-protection mandate (paragraph .01):
- How does your team apply the investor-protection framing when evaluating a management estimate or a disclosure judgment call?
On engagement partner accountability (paragraph .10):
- Can you walk us through how significant findings were escalated and evaluated this cycle?
- What significant judgments did you personally review, and what evidence supported your conclusions?
- Were all required communications made on schedule? If not, what caused the delay?
On professional skepticism (paragraph .11):
- Where did your team apply the most skepticism this cycle, and what drove that focus?
- Were there areas where management's position was initially challenged and subsequently accepted? What changed your view?
On documentation (AS 1215.15):
- Has your firm completed the audit file within the 14-day window? Does the 14-day rule apply to your firm for this audit cycle, or does the December 15, 2025 delayed effective date apply?
- How is the file structured to identify who performed and reviewed each procedure, and on what date?
On independence (paragraphs .04-.06):
- Have all non-audit services been evaluated against both PCAOB and SEC independence criteria? Is there a current independence confirmation on file?
On competence (paragraph .07):
- Does the engagement team have specific industry expertise relevant to our business? How is that competence documented?
FAQ
What is PCAOB AS 1000? AS 1000 is the PCAOB's consolidated foundational auditing standard, adopted May 13, 2024 and approved by the SEC on August 20, 2024. It supersedes five legacy interim standards (AS 1001, AS 1005, AS 1010, AS 1015, and AS 2815) that had been in place since 2003, and establishes the general principles and responsibilities that apply to every PCAOB audit.
Who does AS 1000 apply to? AS 1000 applies to all registered public accounting firms conducting audits under PCAOB standards, which means audits of SEC-reporting public companies and broker-dealers subject to PCAOB oversight. It is effective for fiscal years beginning on or after December 15, 2024, so calendar-year-end companies are already in the first audit cycle under the standard.
Does AS 1000 create new legal obligations for auditors? The PCAOB and SEC were explicit that AS 1000 does not create new legal obligations. It clarifies and codifies existing responsibilities. However, the investor-protection framing in paragraph .01 does provide a sharper interpretive standard against which auditor conduct will be evaluated in inspections and enforcement proceedings.
What is the 14-day documentation rule under AS 1000? AS 1000 (through amendments to AS 1215) reduces the audit documentation completion window from 45 days to 14 days after the report release date. Large firms (more than 100 issuer opinions in calendar year 2024) must comply for fiscal years beginning on or after December 15, 2024. Smaller firms have until fiscal years beginning on or after December 15, 2025.
How does AS 1000 relate to QC 1000? AS 1000 sets the engagement-level responsibilities of the auditor and engagement partner. QC 1000 governs the firm-level quality control system that supports those responsibilities. They are companion standards in the PCAOB's modernization agenda and are designed to work together.
What happened to AS 1001, AS 1005, AS 1010, AS 1015, and AS 2815? All five are superseded by AS 1000 and related amendments. They no longer exist as standalone standards. Their substance has been consolidated, clarified, and in some cases updated within AS 1000.
