Beyond the fine: What EY and KPMG’s FRC probes tell us

In our initial coverage, we incorrectly reported that the FRC was probing KPMG's audits of EnQuest. The regulatory investigation launched in late July 2026 actually concerns KPMG's statutory audit of John Wood Group plc for FY2023, along with Accountancy Scheme enquiries into two individual accountants. The online article and database records have been updated.

When the Financial Reporting Council (FRC) announced an investigation into KPMG’s audit of engineering group John Wood Group plc, coming just days after a £1.2m fine issued to EY over Made.com, it underscored an unmistakable shift in UK audit oversight.

Both actions arrived right as the FRC’s updated Audit Enforcement Procedure (AEP) officially took effect on July 1, 2026. Taken together, KPMG’s fresh enquiry and EY’s settled enforcement highlight where regulator scrutiny is intensifying: forward-looking evaluations, complex contract accounting, and going concern models in volatile markets.

Case 1: EY and Made.com

Online furniture retailer Made.com listed on the London Stock Exchange in 2021 with a £775m valuation, only to enter administration 16 months later.

Following an investigation under the AEP, the FRC sanctioned EY £1.197m (reduced from £1.8m for early admission) and fined audit engagement partner Julie Carlyle £49,000. Crucially, the regulator did not allege that the financial statements were factually wrong or that EY caused the company’s collapse.

Instead, the penalty centered on a failure to obtain sufficient appropriate audit evidence in two key areas:

Case 2: KPMG and John Wood Group

The FRC launched a formal investigation into KPMG LLP regarding its statutory audit of John Wood Group plc for the financial year ended 31 December 2023. Parallel probes under the Accountancy Scheme were opened into the conduct of two individual accountants relating to financial reporting and auditor communications for the engineering firm’s Projects Business Unit.

While the investigation is ongoing, engineering and project-based groups inherently require heavy management judgment around:

The Wood Group enquiry signals that the FRC is scrutinising how auditors verify internal reporting from business units and evaluate long-term contract estimates.

The FRC’s Updated Enforcement Playbook

These proceedings coincide with structural changes to the FRC’s enforcement regime that came into effect on July 1, 2026.

The updated framework provides regulators with a broader spectrum of resolution mechanisms:

The FRC also aligned its threshold for opening formal investigations with other major regulators, requiring “reasonable grounds to suspect” a breach of relevant requirements.

Operational Lessons for UK Audit Practices

Whether leading audits at a Big Four practice or managing teams at mid-tier firms auditing Public Interest Entities (PIEs), these regulatory actions point to clear operational priorities:

Audit Focus Area Common Pitfall Regulatory Expectation
Going Concern Accepting management models without recalculation. Independent formula checks, downside scenario stress-testing, and documented challenge.
Contract Accounting Relying on project manager estimates without independent checks. Verifying cost-to-complete assumptions against historical performance and third-party data.
Deferred Tax Assets Accepting long-range profit forecasts passively. Verifiable, evidence-backed proof that future taxable profits are achievable.

1. Spreadsheet Logic Demands Verification

Checking final output numbers is insufficient. If an audit file lacks evidence that the engagement team tested the mathematical logic and formulas driving management’s cash flow models, inspectors will treat it as an evidentiary failure.

2. Document the Skepticism

A recurring theme in FRC enforcement is a lack of recorded pushback. If an audit team debates complex revenue recognitions or forecasts with management but fails to record why management’s explanations were accepted, regulators will assume no effective challenge occurred.

3. Establish Clear Self-Reporting Protocols

With the revised AEP rewarding early cooperation, firm risk committees should review how internal inspection findings are handled. Identifying deficiencies internally and engaging transparently with regulators can significantly mitigate financial and reputational impact.

The Takeaway for UK Practitioners

With over £14.5m in total penalties handed down across the sector in the previous financial year, the FRC is not reducing oversight. Instead, it is modernising its processes to address audit quality issues faster and with greater precision.

For engagement teams across the UK, the core message running through both the Made.com sanction and the John Wood Group enquiry is identical: when management presents complex estimates or long-term forecasts, the auditor’s role is not to verify that the numbers look plausible — it is to independently test whether the underlying assumptions hold up under scrutiny.

Share
Exit mobile version