How the Statutory Audit Process Works in Switzerland: a Step-by-step Guide for Boards and Trustees

The statutory audit process works in Switzerland step-by-step in a way that every board member, trustee and finance leader should understand before the first planning meeting takes place. This guide explains, phase by phase, how statutory audits in Switzerland are conducted, what boards and trustees should expect at each stage, planning, fieldwork and reporting, and the practical actions that turn a compliance exercise into a genuinely value-adding one. It summarises the legal foundations set out in the Swiss Code of Obligations, clarifies the difference between ordinary audits and limited statutory examinations, and offers a board-level checklist you can apply immediately.

Whether you sit on the board of a mid-sized company, act as a trustee, or oversee a regulated entity, the aim is to give you clear, jurisdiction-specific orientation.

This article provides explanatory information and advisory commentary from an audit and assurance specialist. It does not constitute legal advice or legal representation. Insights are presented as practical guidance from a Swiss audit professional to help boards and trustees prepare effectively.

What is a statutory audit in Switzerland?

A statutory audit is an independent examination of an entity’s annual financial statements, required by law and resulting in a formal auditor’s report. In Switzerland the obligation to appoint an auditor and have the accounts audited flows directly from the Swiss Code of Obligations, which sets out both the thresholds that trigger an audit and the duties of the auditing body. Understanding how the statutory audit process works in Switzerland step-by-step begins with this legal foundation, because it determines which type of audit applies and what level of assurance the board ultimately receives.

Legal basis under the Code of Obligations

The Code of Obligations distinguishes between an ordinary audit and a limited statutory examination, and it fixes the size criteria that move a company from one regime to the other. The relevant audit provisions are found principally in Articles 727 and following of the Code. The same body of law defines the independence requirements for the auditing body, the content of the auditor’s report, and the circumstances in which an audit may be waived. Boards should treat these provisions as the baseline; the consolidated official text, available through Fedlex, is the authoritative reference whenever a question of scope or obligation arises.

Who needs a statutory audit?

In general terms, companies that exceed defined size criteria, measured across balance sheet total, turnover and the number of full-time employees, are subject to an ordinary audit. Smaller companies fall within the limited statutory examination regime, and the very smallest entities may, in defined circumstances and with the consent of all shareholders, opt out of an audit altogether where the annual average number of full-time positions does not exceed the limit set in the Code of Obligations. Separately, certain entities must always be audited regardless of size, including banks, insurance companies and particular foundations.

The precise thresholds are set out in the Code of Obligations, and boards should confirm their current position against the official text rather than relying on general rules of thumb.

Types of statutory audits, ordinary versus limited statutory examination

Swiss law recognises two distinct statutory audit regimes, and the practical experience of the board differs markedly between them. An ordinary audit (ordentliche Revision / contrôle ordinaire) delivers reasonable assurance through a full programme of controls testing and substantive procedures. A limited statutory examination (eingeschränkte Revision / contrôle restreint) delivers a lower, limited level of assurance through a narrower set of enquiries, analytical procedures and selected substantive checks. Knowing which regime applies shapes everything from the audit timeline to the wording of the final report.

When each type applies and what it means for the board

Larger and more complex entities fall under the ordinary audit regime, which is also where listed companies and groups preparing consolidated accounts typically sit. The limited statutory examination regime serves smaller companies that still require independent oversight but whose transactions are less complex. For boards, the practical implication is one of assurance depth: an ordinary audit scrutinises the internal control system and tests transactions in detail, whereas a limited statutory eamination provides a lighter review. Where a company is growing, approaching the thresholds or undertaking significant transactions, the board should anticipate a possible shift into the ordinary regime and plan documentation accordingly.

Appointment and independence of the auditor

The auditing body is appointed by the general meeting of shareholders, and the appointment is a decision the board should prepare carefully rather than treat as a formality. The Code of Obligations requires that the auditor be sufficiently qualified and, crucially, independent of the entity being audited. For ordinary audits the law requires a licensed audit expert, and for entities of public interest the firm must be subject to state oversight by the Federal Audit Oversight Authority. Independence is not simply an ethical preference; it is a statutory condition of a valid audit.

Independence concerns the absence of relationships that could compromise objectivity. The auditor must not participate in bookkeeping or decision-making for the entity, must avoid financial or personal ties that create a conflict, and must observe limits on the non-audit services it may provide. Boards should document how independence has been assessed, because a defect here can undermine the audit’s standing. For entities supervised by the Swiss Financial Market Supervisory Authority, additional and stricter requirements apply, set out on the FINMA auditors pages. Audit firms themselves are licensed and supervised by the Federal Audit Oversight Authority (FAOA / RAB-ASR).

Reappointment, resignation and removal

The auditing body is typically elected for a defined term and may be re-elected. The general meeting can replace the auditor, and the auditor may resign, subject to the procedural safeguards in the Code of Obligations designed to prevent an auditor being removed simply for raising uncomfortable findings. Where an auditor resigns or is not re-elected, the board should understand the reasons and, for regulated entities, be alert to any notification obligations. Good governance treats a change of auditor as a matter warranting a clear explanation to shareholders and, where relevant, the supervisor.

How the statutory audit process works in Switzerland step-by-step: planning, materiality and risk

Planning is where the statutory audit process works in Switzerland step-by-step in its most consequential phase, because the decisions taken here determine the depth, direction and efficiency of everything that follows. During planning the auditor develops an understanding of the entity and its environment, identifies the risks of material misstatement, sets materiality, and designs an audit strategy that responds to those risks. For boards, the planning phase is the earliest opportunity to influence how smoothly the audit will run.

Setting materiality, thresholds and examples

Materiality is the threshold above which a misstatement could reasonably be expected to influence the decisions of users of the financial statements. Auditors usually set an overall materiality figure by applying a percentage to a chosen benchmark, commonly profit before tax, total revenue, total assets or equity, selecting the benchmark that best reflects what matters to users of that particular entity. For a profitable trading company, a percentage of profit before tax may be appropriate; for an asset-heavy holding entity, a measure based on total assets may be more relevant.

From overall materiality the auditor derives performance materiality, a lower figure used when performing procedures to allow for the aggregation of individually immaterial misstatements. A separate, lower threshold is set for clearly trivial items below which misstatements need not be accumulated. Materiality is not purely quantitative: certain items are material by nature regardless of amount, such as transactions with related parties, directors’ remuneration, or anything that tips a result from profit to loss. Boards do not set materiality, but understanding the auditor’s benchmark helps the board interpret the significance of findings.

Risk assessment and significant risks

Risk assessment is the engine of a modern audit. The auditor identifies where the financial statements are most susceptible to material misstatement, whether through error or fraud, and concentrates effort accordingly. Areas commonly flagged as significant risks include revenue recognition, the valuation of assets requiring judgement, provisions and estimates, related-party dealings, and management override of controls. The auditor will also consider the entity’s IT environment and, for groups, the risks arising at component level and on consolidation. A clear, early dialogue between the board and the auditor about known risks and recent business changes makes this phase far more effective and avoids surprises later.

Fieldwork and sample testing

Fieldwork is the execution phase, where the auditor gathers the evidence needed to support the opinion. It typically combines tests of controls, assessing whether the entity’s internal controls operate effectively, with substantive procedures that test the figures directly. In an ordinary audit the balance between these approaches depends on how much the auditor intends to rely on the control environment. In a limited statutory examination the emphasis falls on enquiry and analytical review, with targeted substantive testing where risk warrants it. Throughout, the auditor documents the work performed, the evidence obtained and the conclusions reached.

Sample sizes and population considerations

Auditors rarely test every transaction. Instead they select samples designed to provide sufficient evidence about the population as a whole. Sample size is driven by the assessed risk, the degree of assurance sought from that particular test, the expected rate of error and the chosen sampling method, whether statistical or judgemental. A high-risk, high-value population will attract larger samples and more items selected individually; a low-risk, homogeneous population may be tested with a smaller sample. Boards can support this work by ensuring that underlying records are complete and reconcilable, because gaps in a population force the auditor to expand testing and extend the timeline.

IT systems and data analytics in fieldwork

Data analytics increasingly reshape how the statutory audit process works during fieldwork. Where an entity’s records are held in reliable, well-structured systems, auditors can interrogate entire populations rather than samples, testing journal entries for anomalies, matching transactions to supporting data, and identifying outliers for follow-up. This raises the premium on clean, accessible data. Boards whose finance systems produce complete and well-organised exports will experience faster, more focused fieldwork; those relying on fragmented spreadsheets should expect more manual testing and more questions. Where specialist areas arise, valuations, pensions, complex instruments, the auditor may involve internal experts, and management should be prepared to engage with them.

Reporting outputs, the auditor’s report and management letter

The reporting phase produces the deliverables the board has been working towards. The most formal of these is the auditor’s report, the document in which the auditor expresses an opinion on whether the financial statements comply with the law and the articles of incorporation and, in an ordinary audit, confirms that an internal control system exists. Alongside it, the board typically receives a management letter and, for larger entities, a comprehensive report to the board on the audit. Professional guidance on the form and content of these outputs in the Swiss context is maintained by EXPERTsuisse.

What boards should expect in the auditor’s report

An ordinary audit report expresses reasonable assurance and may take several forms. An unqualified (clean) opinion confirms the financial statements comply with the applicable framework. A qualified opinion signals a specific, contained problem. An adverse opinion indicates pervasive misstatement, and a disclaimer indicates the auditor could not obtain sufficient evidence to form an opinion. A limited statutory examination report uses limited-assurance wording, effectively stating that nothing came to the auditor’s attention suggesting the accounts do not comply with the law. Boards should read beyond the opinion paragraph: emphasis of matter paragraphs, references to going concern and any key audit matters carry important signals about where risk and judgement were concentrated.

The management letter, practical uses

The management letter, sometimes called a recommendation letter, is where much of the practical value of an audit resides. It sets out control weaknesses, inefficiencies and recommendations identified during the audit but not significant enough to affect the opinion. For boards and trustees it is a roadmap for improvement. The most effective boards treat each point as an action item with an owner and a deadline, and they revisit prior-year letters to confirm that recommendations have been implemented, because recurring findings suggest a governance weakness that auditors, and in regulated contexts supervisors, will notice.

Typical timelines and milestones

While every engagement differs, the statutory audit process works along a recognisable sequence of milestones. The cycle usually opens with engagement and planning, including risk assessment and materiality setting. Larger audits then conduct interim fieldwork before the year-end, focusing on controls and transactions to that date. After year-end, the auditor performs final fieldwork on the closing balances, followed by the preparation of a draft report, clearance of outstanding points with management, and issuance of the final report ahead of the general meeting. For a small, well-documented entity the planning-to-report cycle may run several weeks; for larger or group audits it can extend over several months.

Accelerating the audit, board actions and best practice

Boards hold more influence over the timeline than they often realise. Preparing complete year-end files before fieldwork begins, nominating a single informed point of contact, responding promptly to information requests, and resolving known accounting judgements early all compress the schedule. Scheduling an audit committee meeting between draft and final reporting gives the board time to absorb findings without creating a bottleneck before the general meeting. In practice, the audits that finish on time are almost always the ones where the board treated preparation as its own responsibility rather than the auditor’s.

How boards and trustees should prepare, a board checklist

Preparation is the single greatest determinant of an efficient, value-adding audit. The following checklist covers the actions boards and trustees should take before and during the engagement:

• Close the books cleanly. Complete reconciliations, finalise estimates and ensure supporting schedules tie to the ledger before fieldwork starts.
• Assemble the evidence pack. Prepare the documents the auditor will request, contracts, bank confirmations, fixed-asset registers, loan agreements and board minutes, in advance.
• Appoint a point of contact. Give the auditor one informed person who can coordinate responses and escalate quickly.
• Address prior-year findings. Demonstrate that last year’s management letter points have been actioned.
• Convene the audit committee. Schedule meetings to receive the audit plan, discuss significant risks and review findings.
• Confirm independence. Document the board’s assessment of the auditor’s independence and any non-audit services provided.
• Plan the reporting window. Align the draft and final report dates with the general meeting calendar.

Questions trustees should ask the auditors

Trustees and non-executive board members add most value by asking sharp questions. Useful lines of enquiry include:

• Which areas did you assess as significant risks, and why?
• What benchmark did you use to set materiality, and what does that imply for the findings?
• Were there any disagreements with management over accounting judgements?
• Did you identify any control weaknesses we should prioritise?
• Are there any going-concern or subsequent-event matters the board should know about?
• Have the prior-year recommendations been satisfactorily resolved?

Common audit findings in Switzerland and remediation

Certain issues recur across Swiss audits, and boards that anticipate them are better placed to respond. Frequent findings include incomplete or non-compliant disclosures in the notes, revenue recognised in the wrong period, valuation and impairment judgements that lack sufficient support, related-party transactions that are inadequately documented, and weaknesses in the internal control system, particularly around segregation of duties in smaller finance teams. Remediation usually involves tightening documentation, formalising the authorisation of judgemental estimates, improving the disclosure checklist, and strengthening controls where staffing is thin. The management letter is the natural vehicle for tracking these actions through to completion.

Reporting obligations when required

In defined circumstances the auditor has duties that extend beyond management and the board. Where the law requires it, for instance where there is evident over-indebtedness or a serious breach of law or the articles of incorporation that management or the general meeting fails to address, the Code of Obligations sets out an escalation path, which can ultimately require notification of the court. Boards should understand these escalation triggers in advance so that a required notification is never a surprise.

Swiss case law on auditor duties and liability, accessible through the Swiss Federal Supreme Court decisions database, reinforces why these obligations are taken seriously, and board policy on audit oversight sits within the wider supervisory framework described by the Federal Department of Finance.

Practical considerations for regulated entities

Banks, insurers and pension funds operate under a materially stricter audit regime than ordinary commercial companies. Alongside the financial statement audit, these entities are subject to a regulatory audit that assesses compliance with supervisory requirements. The auditor must hold the appropriate licence, and the scope, reporting format and interaction with the supervisor all follow prescribed expectations. Boards of regulated entities should understand that the audit is not only an instrument of shareholder accountability but also a channel of supervisory assurance.

Interaction with FINMA and other supervisors

For FINMA-supervised institutions, the audit firm carries out a regulatory audit in addition to the financial statement audit, reporting on prudential and conduct matters as well as the financial statements. The requirements for auditors of supervised institutions, including licensing and reporting expectations, are set out on the FINMA auditors pages. Pension funds answer to their respective cantonal or regional supervisory authorities for occupational pensions, with comparable logic. Boards in these sectors should coordinate audit planning with regulatory deadlines, anticipate additional reporting, and ensure that governance arrangements can respond promptly to any matters the auditor raises with the supervisor.

Conclusion and recommended next steps for boards

Understanding how the statutory audit process works in Switzerland step-by-step equips boards and trustees to move from passive recipients of an audit to active participants who shape its efficiency and extract its full value. The essentials are consistent: confirm which audit regime applies under the Code of Obligations, appoint a qualified and independent auditor, engage early on risk and materiality, prepare documentation before fieldwork, read the auditor’s report and management letter critically, and follow through on findings. For regulated entities, add the supervisory dimension and coordinate with FINMA expectations. Boards that embed these habits turn the annual audit into a recurring source of assurance and improvement rather than a deadline to survive.

For tailored advisory support on preparing for and getting more from your statutory audit, boards and trustees can connect with an Audit & Assurance specialist through the Global Law Experts directory.

Sources

1. Swiss Code of Obligations (official consolidation)
2. Swiss Federal Law Compilations (Fedlex)
3. FINMA, Auditors / supervised entities guidance
4. Federal Audit Oversight Authority (FAOA / RAB-ASR)
5. Swiss Federal Supreme Court (Bundesgericht), decisions database
6. Swiss Federal Department of Finance (EFD)
7. EXPERTsuisse, Swiss expert accountants and auditors association