Why the FRC is targeting offshore audit work and what your firm must do

The Financial Reporting Council (FRC) has officially placed the UK’s audit sector on notice. The watchdog announced heightened monitoring over how major audit firms use overseas service delivery centres. Commonly located in India, the Philippines, and South Africa to execute statutory audit work.

While the Big Four (PwC, Deloitte, EY, and KPMG) and mid-tier practices have relied on offshore hubs for years to offset UK staffing shortages, the regulator’s message is unequivocal: you can outsource the work, but you cannot outsource accountability.

For firm partners, compliance leads, and senior auditors across the UK, this shift isn’t just a headline. It marks a clear change in how Audit Quality Reviews (AQRs) will be conducted going forward.

Why Is the Regulator Stepping In Now?

A decade ago, overseas teams were largely tasked with basic data entry, casting financial statements, or standard reconciliations. Today, offshore audit teams routinely perform complex substantive testing, control evaluations, and initial analytical reviews, frequently accounting for 30% to 50% of total billable audit hours on standard engagements.

While this model helps firms manage tight audit margins and seasonal capacity crunches, it introduces distinct audit quality risks that the FRC is no longer willing to overlook:

1. The “Rubber-Stamp” Risk: UK-based engagement partners and managers sign off on workpapers prepared offshore without sufficient evidence of detailed review or questioning.

2. Context and Professional Skepticism: Offshore staff, operating thousands of miles away, often lack direct contact with the client’s management team. Without a deep understanding of the client’s day-to-day operations or industry nuances, audit procedures can easily become a mechanical “tick-box” exercise.

3. Communication and Time-Zone Gaps: Critical audit queries can get lost in translation or delayed, leading to rushed reviews right before reporting deadlines.

This isn’t an isolated concern. Overseas oversight bodies, such as the US Public Company Accounting Oversight Board (PCAOB), have reported elevated deficiency rates in audits where large portions of work were delegated to global delivery networks. The FRC is moving proactively to ensure UK audit standards do not suffer similar erosion.

What the Standards Say (And Where Firms Fall Down)

Under ISA (UK) 220 (Revised) (Quality Management for an Audit of Financial Statements) and ISQM 1, the UK Registered Auditor holds total responsibility for the direction, supervision, and performance of the audit engagement.

Regulators are observing a disconnect between policy and practice:

• Inadequate Partner Footprint: Inspection teams routinely look for clear evidence that the UK partner actively guided the offshore team during high-risk areas (such as revenue recognition, management override, or going concern). Simply marking a workpaper as “reviewed” in audit software without inline review notes or coaching documentation is a major red flag during FRC inspections.

• Component vs. Service Centre Confusion: Firms sometimes misclassify offshore internal teams as independent third parties rather than an extension of the primary engagement team, leading to gaps in compliance under ISA (UK) 600 (Group Audits).

How UK Firms Should Respond

Whether your firm is a Big Four heavyweight or a mid-tier practice utilising outsourced offshore models to handle busy season, here is practical advice to ensure your offshore workflow passes regulatory muster:

1. Establish an Unbroken Trail of Supervision

When an FRC inspector opens an audit file, they want to see who did the work, who reviewed it, and what questions were asked.

• Ensure UK managers leave clear, documented review notes on offshore workpapers rather than clearing tasks silently.

• Hold mandatory video planning meetings between UK engagement leads and offshore team leads before fieldwork begins, setting clear expectations on risk areas.

2. Train Offshore Teams on UK Frameworks Not Just Software

Offshore staff are often well-trained in software tools but may lack deep exposure to the nuances of FRS 102, UK tax alignment, or recent FRC updates to ISA (UK) 240 (Fraud) and ISA (UK) 570 (Going Concern).

• Invest in UK-specific technical training for your regular offshore personnel.

• Avoid swapping offshore team members midway through an audit; continuity significantly improves professional skepticism.

3. Build Quality Controls into ISQM 1 Frameworks

Under ISQM 1, firms must evaluate risks arising from their operating model. If your firm relies on offshore resource pools, your quality management system must include specific monitoring tools:

• Conduct annual internal quality reviews on a sample of files with heavy offshore involvement.

• Track error rates and review turnaround times for offshore deliverables to spot bottlenecks early.

4. Be Transparent with Clients and Compliant with Data Rules

Clients are increasingly asking where their financial data is being processed.

• Review client engagement letters to ensure data-sharing disclosures explicitly mention offshore processing hubs and comply with UK GDPR and Data Protection Act requirements.

• Maintain strict cloud access controls. Data should be accessed securely through virtual desktop infrastructure (VDI) rather than stored on local offshore devices.

The Regulatory Reality for UK Firms

Offshoring is now a permanent structural element of the accounting sector, it is essential for managing workload and maintaining capacity. However, the regulatory landscape has changed. The FRC is making it clear that cost efficiencies can never come at the expense of audit quality.

Firms that treat offshore teams as genuine extensions of their core UK staff. Supported by rigorous review, continuous training, and robust oversight will navigate this regulatory scrutiny with confidence. Those relying on quick-fix outsourcing without active partner involvement may find their next FRC inspection report uncomfortable reading.