Accounting

Audit Readiness Checklist: Preparing for Your First External Audit or Buyer Diligence

The 40-point checklist small businesses use to get books, controls, and workpapers ready for an external financial-statement audit or investor / buyer diligence. GAAP conversion, PBC list, data-room setup, and the mistakes that trigger auditor adjustments.

By Aparna Devalla, CPA6 min · 5 slidesUpdated August 9, 2026

1 / 5

What audit readiness actually means

Audit readiness is the pre-work that decides whether an audit takes six weeks or six months, whether the PBC (prepared-by-client) list is a formality or a scramble, and whether the opinion comes back unqualified or riddled with adjustments.
It applies to two situations most small businesses face: (1) a first external financial-statement audit (usually forced by a lender covenant, a large 401(k) plan, an investor requirement, or a nonprofit / grant condition); (2) financial due diligence from an acquirer or lead investor, which behaves the same way as an audit but with faster clocks and less patience.
The signal to start: as soon as anyone with leverage (bank, investor, board) mentions the possibility. A year of runway is dramatically cheaper than six weeks of deadline pressure.
Rubric Financial handles first-audit readiness, buyer / investor diligence prep, and cleanup-before-raise engagements as fixed-fee scoped work — a partner CPA who has been through the process leads it, not a rotating team.

The GAAP-conversion block (largest, do first)

Convert cash-basis books to accrual for every historical period the auditor will test — typically two full fiscal years. This is where most first-audit budget overruns come from: assumed done, actually not.
Apply ASC 606 revenue recognition consistently: identify contracts, identify performance obligations, allocate transaction price, and recognize revenue as each obligation is satisfied. Deferred revenue and unbilled receivables get real workpapers, not spreadsheets.
Apply ASC 842 lease accounting: recognise right-of-use assets and lease liabilities for every operating lease longer than 12 months. Missed leases are one of the fastest ways to earn a qualification.
Apply ASC 718 stock compensation: fair-value grants at issuance, expense over the service period. Common founder oversight; auditors always find it.
Document related-party transactions upfront. Auditors always find them; disclosed ones are footnote entries, undisclosed ones become opinion qualifications.

The workpaper block (the auditor's PBC list)

Bank and credit-card reconciliations for every account, every month of the audit period, with reconciling items cleared.
AR aging with bad-debt reserves substantiated; AR reconciled to the billing system (Stripe, QuickBooks, Shopify, etc.) with a documented tie-out.
AP aging with vendor confirmations for the largest 10-20 vendors; accrued liabilities substantiated with source documents.
Inventory count as of period-end, with the counting methodology (full, cycle, sampled) documented and price-tested against invoices.
Fixed-asset register: acquisition date, cost, depreciation method, accumulated depreciation, and current NBV for every asset above the capitalization threshold.
Payroll reconciliation: gross wages per the payroll system tied to wages expense in the GL, quarterly 941s and annual W-2/W-3 reconciled.
Sales-tax filings tied to sales revenue by state, with the nexus analysis documented for any state where the business had activity but did not register.
Every board resolution, contract above the materiality threshold, lease agreement, and cap-table document filed in a data room with a clear index.

Controls and process (what auditors quietly test)

A documented month-end close checklist: who does what, in what order, with a hard sign-off. Auditors judge control quality by whether close is a repeatable process or a heroic scramble.
Segregation of duties in AP: the person who enters invoices should not also approve payments and reconcile the bank. In a five-person business, dual approval on payments above a threshold is the compensating control.
Bank access reviewed quarterly. Ex-employees with lingering access is a control deficiency and a fraud opening.
IT general controls: user access reviews for the accounting system, backup verification, and change management for any custom reports the financial statements depend on. Small businesses skip this and it usually appears in the management letter.

Buyer / investor diligence — the QoE angle

A quality-of-earnings (QoE) analysis is what an acquirer or lead investor commissions. It looks like an audit but the goal is different: get to adjusted EBITDA that the buyer will underwrite.
Prepare an adjusted-EBITDA schedule upfront: strip out one-time items (legal settlements, moving costs, insurance recoveries), owner add-backs (personal expenses, above-market comp), and pro-forma normalisations (rent to market, run-rate a mid-period acquisition). Every add-back needs supporting documentation.
Trailing twelve-month P&L by month, with revenue split by customer, product line, and channel; gross margin by the same cuts.
Customer concentration: revenue and margin by top 20 customers, with 3-year retention and net revenue retention.
Working-capital normalisation: the QoE team will benchmark your DSO, DPO, and inventory turns and adjust the purchase price for any excess or shortfall in working capital at close.
Contracts on hand: MSAs, SOWs, subscription agreements — cataloged, ideally scanned into the data room by customer, sorted by term. Buyers value the recurring-revenue book more than the transactional; make the split visible.

Use ← → keys or swipe on mobile

Educational content, not tax, legal, or accounting advice. Confirm with a CPA before acting.

Frequently asked questions

How long does audit readiness take for a small business?

Depends on the starting point. Books already on accrual with clean reconciliations and a documented close: 4-8 weeks. Books on cash basis with backlog, no formal close, and missing workpapers: 3-6 months. First audits usually take longer than expected because GAAP conversion is a bigger project than most owners assume — start when the conversation about an audit first comes up, not when the deadline arrives.

How much does audit readiness cost?

It depends on the state of the books, the size of the business, the industry, and the complexity of the revenue model. Rubric Financial scopes readiness engagements as fixed-fee after a discovery call: the readiness work runs separately from the audit itself (which the outside audit firm charges for), and the readiness fee is usually a fraction of the audit fee saved by not going in cold.

Do I need audit readiness for a lender's review or a compilation?

Formally, no — compilations and reviews are lower-assurance engagements and do not require the same rigor. Practically, a lot of the same fundamentals help: accrual books, clean reconciliations, and documented close. The difference is that a review does not test transactions and a compilation does not verify anything; both are the CPA taking your numbers as given. Readiness only becomes essential for full audits, financial due diligence, and any process where the outside party independently tests balances.

What is a PBC list?

Prepared-by-client — the document schedule the auditor requests before fieldwork begins. It usually runs 60-150 line items: bank reconciliations, AR / AP agings, contracts, lease agreements, board minutes, and every workpaper for every material balance-sheet line. Getting a PBC list ready is roughly 60 percent of the total readiness project.

What is quality of earnings (QoE) and how is it different from an audit?

QoE is the financial-diligence workstream a buyer or lead investor commissions in a transaction. It looks like an audit — testing transactions, analysing revenue, normalising expenses — but the goal is different: get to an adjusted EBITDA figure the buyer will underwrite for pricing. QoE also always includes working-capital analysis, customer concentration, and management interviews. Audits produce an opinion on GAAP compliance; QoE produces a deal-relevant view of earnings power.

Tax

Previous in AccountingOutsourced Accounting Cost: What Drives the Price

Back to all resources

Want your books handled properly?

Monthly close, accrual-basis financials, and a ledger that holds up when a lender, a buyer, or an examiner asks to see it.

See accounting services

Audit Readiness Checklist: Preparing for Your First External Audit or Buyer Diligence

What audit readiness actually means

The GAAP-conversion block (largest, do first)

The workpaper block (the auditor's PBC list)

Controls and process (what auditors quietly test)

Buyer / investor diligence — the QoE angle

Frequently asked questions

How long does audit readiness take for a small business?

How much does audit readiness cost?

Do I need audit readiness for a lender's review or a compilation?

What is a PBC list?

What is quality of earnings (QoE) and how is it different from an audit?

S-corp vs. LLC for Small Business Owners

K-1 Income: What It Is and How to File It

Multi-State Sales Tax for Remote and Online Businesses

Want your books handled properly?

Audit Readiness Checklist: Preparing for Your First External Audit or Buyer Diligence

What audit readiness actually means

Frequently asked questions

How long does audit readiness take for a small business?

How much does audit readiness cost?

Do I need audit readiness for a lender's review or a compilation?

What is a PBC list?

What is quality of earnings (QoE) and how is it different from an audit?

Related reading

You might also like

S-corp vs. LLC for Small Business Owners

K-1 Income: What It Is and How to File It

Multi-State Sales Tax for Remote and Online Businesses

Want your books handled properly?