According to the current draft directive on the revision of the CSR Directive, large companies will also be obliged to include more sustainability in their management reports for the 2023 financial year for the first time. Small capital market-oriented companies must report for the first time in the management report for the 2026 financial year.
The inclusion of information in the management report also raises the question of whether this information must be audited. After all, the auditor also confirms the management report’s compliance with statutory provisions with his audit opinion. But how does the auditor ensure audit assurance in this new audit area and what requirements must a company’s documentation meet in order to continue to receive an unqualified audit opinion for its annual financial statements?
Clarification of the obligation to audit non-financial information
Sustainability reports and non-financial statements are currently not subject to a content audit by an auditor, who only has to check that they were submitted on time and, if necessary, check the reference in the management report to the place of publication (Art. 317 (2) sentence 4 HGB).
With the introduction of the revised regulations on non-financial reporting, the audit obligation changes as well. While the audit obligation for capital market-oriented companies with more than 500 employees currently lies with the supervisory board (Art. 171 (1) sentence 4 AktG), the introduction of the new regulations on non-financial information in the management report requires the auditor to audit this information. On the basis of the – in contrast to the preparation process – less specified auditing standards, the auditor is temporarily granted limited assurance for the audit of this information.
Documentation requirements in accordance with current audit standards
ISAE 3000 on the audit of information other than historical financial information is currently the relevant auditing standard. The standard setters are working intensively on new auditing standards tailored to sustainability reporting. In principle, it can already be stated that the auditor’s risk-oriented audit approach will be retained, meaning that a company to be audited must be prepared for the following audit procedures.
- Audit of the internal control system: documentation + implementation + controls
- Double materiality: Documentation on the completeness and relevance of non-financial information for shareholders and stakeholders
- Case-by-case audits: Document review of the data basis of key figures, accuracy of measurement methods and estimated values
- Analytical audit procedures
- Structured merging of business activities with the taxonomy
In order to prepare for the new requirements, it is advisable to consult with your auditor in good time. Our services in this context include the audit...
- of processes for data collection of non-financial information
- of non-financial statements
- of sustainability reports
- according to ISAE 3000