Investment Adviser Audit Obligations

Investment advisers registered with the U.S. Securities and Exchange Commission face a structured set of audit and compliance obligations that govern how client assets are safeguarded, how financial statements are prepared, and how regulatory filings are verified. These obligations arise primarily under the Investment Advisers Act of 1940 and the SEC's rules promulgated thereunder, with particular weight placed on Rule 206(4)-2, commonly known as the Custody Rule. Understanding which requirements apply — and when — depends on factors including adviser registration status, assets under management, and whether the adviser has custody of client funds or securities.

Definition and scope

An investment adviser, for purposes of federal regulation, is any person or firm that provides investment advice for compensation and meets the registration thresholds established by the SEC's Division of Investment Management. Advisers managing $110 million or more in assets under management are generally required to register with the SEC (SEC, Form ADV instructions); those below that threshold typically register with state regulators.

Audit obligations for investment advisers fall into two primary categories:

1. Surprise examinations — Required when an adviser has custody of client assets. Under Rule 206(4)-2 (17 CFR § 275.206(4)-2), advisers with custody must arrange for an independent public accountant registered with the Public Company Accounting Oversight Board (PCAOB) to conduct an unannounced annual examination of client assets.
2. Financial statement audits — Required when an adviser manages a pooled investment vehicle, such as a private fund. Under the Custody Rule's "audit provision," advisers can satisfy custody requirements by having the fund's financial statements audited by a PCAOB-registered firm and distributing those statements to investors within 120 days of the fund's fiscal year-end (180 days for fund-of-funds).

The scope of these obligations extends beyond simply hiring an auditor. Advisers must maintain proper books and records under Rule 204-2, ensure auditor independence, and file accurate Form ADV disclosures — practices closely examined in auditor independence considerations for financial services firms.

How it works

The audit process for an SEC-registered investment adviser follows a structured sequence tied to the adviser's custody status and fund structure.

Phase 1 — Custody Determination
The adviser first assesses whether it has "custody" as defined under Rule 206(4)-2. Custody exists when an adviser holds client funds or securities, has authority to withdraw funds from client accounts, or serves as a general partner or managing member of a pooled vehicle. This determination drives all subsequent audit requirements.

Phase 2 — Auditor Selection and Engagement
The adviser engages a qualified independent public accountant. For surprise examination requirements, the accountant must be registered with and subject to inspection by the PCAOB. The engagement letter establishes scope, timing, and procedures.

Phase 3 — Surprise Examination Execution
For non-pooled custody arrangements, the accountant conducts an unannounced examination at a date unknown to the adviser. The accountant verifies that client assets held by qualified custodians reconcile with adviser records, then files Form ADV-E with the SEC within 120 days of the examination date (SEC Rule 206(4)-2(a)(4)).

Phase 4 — Fund Financial Statement Audit
For pooled vehicles using the audit provision, the PCAOB-registered firm performs a full financial statement audit under Generally Accepted Auditing Standards (GAAS) or PCAOB standards, depending on whether the fund has publicly traded securities. Audited statements must be distributed to investors within the 120-day deadline for most funds.

Phase 5 — Regulatory Filing and Disclosure
Findings are reflected in Form ADV Part 1 (Item 9, Custody) and, where deficiencies arise, may trigger SEC examination activity. Audit findings and management response procedures govern how identified exceptions are documented and remediated.

Common scenarios

Scenario A — RIA with No Custody
A registered investment adviser that neither holds client funds nor serves in a capacity granting it custody (e.g., a fee-only adviser where clients maintain accounts at an independent qualified custodian) faces no surprise examination requirement. The adviser still bears books-and-records obligations under Rule 204-2 and must complete accurate Form ADV filings, but no annual financial statement audit is mandated by the Custody Rule.

Scenario B — RIA with Custody via Standing Authority
An adviser with standing letters of authorization (SLOAs) that permit it to withdraw fees from client accounts may trigger custody under SEC staff guidance, specifically the 2017 SEC IM Guidance Update 2017-01. In this scenario, the adviser must arrange for a surprise examination unless certain conditions — such as the qualified custodian sending statements directly to clients — are met.

Scenario C — Private Fund Manager
An adviser managing a private equity or hedge fund and serving as general partner has custody by definition. If the fund elects the audit provision under Rule 206(4)-2(b)(4), the fund's financial statements must be audited by a PCAOB-registered firm. This scenario intersects directly with hedge fund audit requirements and private equity fund audit standards, which carry their own layered compliance considerations.

Scenario D — Adviser as Trustee
An adviser serving as trustee over client assets has custody. The SEC has confirmed through no-action letters that such advisers must comply with surprise examination requirements unless an exception applies. The distinction between trustee-held assets and custodian-held assets is a recurring source of examination deficiency.

Decision boundaries

The central compliance question for any registered investment adviser is whether a surprise examination, a fund financial statement audit, both, or neither is required. The decision follows a branching structure:

1. Does the adviser have custody? If no, no audit is required under Rule 206(4)-2. If yes, proceed.
2. Is custody limited to a pooled investment vehicle? If yes, the adviser may satisfy the Custody Rule through the audit provision (annual GAAP/PCAOB audit of fund financials distributed to investors).
3. Is the fund subject to an annual PCAOB-registered audit with timely investor distribution? If yes, the surprise examination requirement is waived for that fund. If no, a surprise examination is required.
4. Does the adviser also hold retail client assets outside the fund? If yes, a separate surprise examination applies to those non-fund client assets regardless of the fund audit provision.

Surprise Examination vs. Fund Audit — Key Distinction

Advisers managing multiple fund structures or a mix of pooled and retail clients frequently face both requirements simultaneously. Risk-based auditing frameworks can help advisers prioritize internal compliance resources across these overlapping obligations.

State-registered advisers follow analogous but not identical rules. The North American Securities Administrators Association (NASAA) Model Rule 203(c)-1 provides a parallel framework for state-level custody requirements, and state examiners may conduct their own compliance examinations independent of any SEC review. The distinction between state and SEC registration — and its audit implications — is part of the broader regulatory landscape covered in SEC reporting and audit requirements.

An adviser's compliance audit versus financial audit obligations operate on separate tracks: the Custody Rule mandates specific financial verification by independent accountants, while the adviser's internal compliance program is separately subject to annual review under Rule 206(4)-7, which requires a written review by a qualified chief compliance officer.

References

• SEC Rule 206(4)-2 — Custody of Funds or Securities of Clients by Investment Advisers (17 CFR § 275.206(4)-2)
• SEC Rule 204-2 — Books and Records (17 CFR § 275.204-2)
• SEC Form ADV — Instructions and Filing Requirements
• SEC Investment Management Guidance Update 2017-01 (Custody Rule)
• Public Company Accounting Oversight Board (PCAOB)
• SEC Division of Investment Management
• North American Securities Administrators Association (NASAA) — Model Rules
• [Investment