INSIGHTS How to Prepare for a Broker Dealer Audit

How to Prepare for a Broker-Dealer Audit

For broker-dealer finance, compliance, and operations leaders, the annual audit is more than a financial statement exercise. It is a coordinated regulatory reporting process that touches books and records, net capital, customer protection, exemption status, internal controls, and filing logistics.

The good news: a broker-dealer audit is much easier to manage when the team treats preparation as a year-round discipline rather than a year-end scramble. Below are practical steps to help your firm prepare efficiently, avoid common delays, and reduce the risk of last-minute surprises.

Start With the Regulatory Framework

The central filing requirement is SEC Rule 17a-5, which generally requires broker-dealers to file annual reports that include a financial report, either a compliance report or an exemption report, and related reports prepared by an independent public accountant. Broker-dealer audits must be performed under PCAOB standards, and SEC Rule 17a-5 also addresses audited and unaudited financial statements, FOCUS Reports, and the accountant's reports connected with annual filings.

A key early planning question is whether your firm will file a compliance report or an exemption report.

Annual reports, including audited financial statements, a compliance or exemption report, and the accompanying accountant reports, are generally due within 60 calendar days after fiscal year-end, with limited extension relief available for certain smaller broker-dealers.

1. Confirm the Audit Scope Early

Before year-end, align internally and with your auditor on the scope of the audit and related attestation work. This should include:

• Whether the firm is a carrying or noncarrying broker-dealer.
• Whether the firm will file a compliance report or exemption report.
• The specific SEC Rule 15c3-3(k) exemption, if any, being claimed.
• Whether any business activities fall outside the claimed exemption.
• Whether the firm is subject to customer protection, reserve, possession-or-control, or security count requirements.
• Whether SIPC agreed-upon procedures, state filings, or other regulatory filings apply.

This step is especially important if your firm changed its business model, added revenue streams, changed clearing arrangements, launched new products, or modified customer account handling during the year.

2. Build a Year-End Close Calendar Around the Filing Deadline

Because the annual filing deadline is tight, the audit timeline should be built backward from the due date. A practical close calendar should include:

1. Pre-close planning meeting with finance, compliance, operations, and the audit team.
2. Trial balance close date and deadline for final adjusting entries.
3. Financial statement draft date.
4. Supplemental schedule preparation date.
5. Compliance or exemption report draft date.
6. FOCUS reconciliation review date.
7. Management representation and legal letter deadlines.
8. Final partner review and filing date.

Do not underestimate the time needed for supplemental schedules and regulatory reconciliations. These often drive audit questions even when the financial statements themselves are straightforward.

3. Prepare the Required Financial Statements and Footnotes

The annual audited financial report must include Form X-17A-5 Part III, including filing information and an oath or affirmation, as well as annual audited financial statements with appropriate footnotes. Required statements generally include:

• Statement of financial condition.
• Statement of income or loss and, if applicable, comprehensive income.
• Statement of changes in ownership equity.
• Statement of cash flows.
• Statement of changes in liabilities subordinated to claims of general creditors.
• Statement of changes in subordinated borrowings.

To prepare efficiently, finance teams should have support ready for:

• Cash and bank reconciliations.
• Clearing broker receivables and payables.
• Revenue recognition by product or service line.
• Expense accruals.
• Related-party balances and transactions.
• Subordinated debt agreements.
• Commitments and contingencies.
• Subsequent events.
• Ownership equity activity.

4. Get the Supplemental Schedules Right

SEC Rule 17a-5 may require supplemental schedules, as applicable, including the computation of net capital and required net capital under SEC Rule 15c3-1, reserve computations under SEC Rule 15c3-3, and information related to possession or control requirements.

Common supplemental information includes:

• Computation of net capital and required net capital under SEC Rule 15c3-1.
• Computation for determination of customer reserve requirements under SEC Rule 15c3-3.
• Computation for determination of Proprietary Account of Broker-Dealers reserve requirements, if applicable.
• Security-based swap customer reserve computations, if applicable.
• Information relating to possession or control requirements under SEC Rule 15c3-3.

Your team should also prepare reconciliations between the audited supplemental schedules and the most recent unaudited FOCUS filing, or include a statement that reconciliation is not necessary if there are no material differences.

5. Revisit Net Capital Before Year-End<

Net capital is one of the most scrutinized areas in a broker-dealer audit. Under SEC Rule 15c3-1, the firm must compute net capital, aggregate indebtedness and required net capital, and that computation may be included in the supplemental schedules required by SEC Rule 17a-5.

Before year-end, review:

• Haircuts and nonallowable assets.
• Aged receivables and collectability.
• Clearing deposits and other restricted assets.
• Subordinated borrowings and approved agreements.
• Expense accrual completeness.
• Open contractual obligations.
• Capital withdrawals and distributions.
• Changes in minimum net capital requirements due to business activities.

A best practice is to perform a "mock audit" of the net capital computation before the books close. This helps identify issues while there is still time to address documentation gaps or operational errors.

6. Validate Customer Protection and Custody Obligations

If your firm is subject to SEC Rule 15c3-3, audit readiness should include a careful review of customer protection requirements, reserve computations, and possession-or-control procedures. Broker-dealers that file a compliance report must address Internal Control Over Compliance and specific financial responsibility rules, including the Net Capital Rule, Customer Protection Rule, quarterly security counts under SEC Rule 17a-13, and account statement rules of the designated examining authority.

Operations and compliance teams should be ready to provide:

• Reserve computation files and supporting schedules.
• Evidence of special reserve bank account activity, if applicable.
• Possession-or-control records.
• Security count documentation under SEC Rule 17a-13.
• Customer and PAB account support, if applicable.
• Exception logs and remediation evidence.
• Customer account statement control evidence.

7. Document Internal Control Over Compliance

For firms filing a compliance report, Internal Control Over Compliance is central to the audit process. SEC Rule 17a-5 defines Internal Control Over Compliance as controls designed to provide reasonable assurance that noncompliance with SEC Rules 15c3-1, 15c3-3, 17a-13, or applicable account statement rules will be prevented or detected on a timely basis.

The compliance report must address whether the broker-dealer established and maintained Internal Control Over Compliance, whether it was effective during and as of year-end, and whether the firm complied with SEC Rule 15c3-1 and specified provisions of SEC Rule 15c3-3 as of year-end.

To prepare, assemble:

• Written policies and procedures.
• Control matrices or narratives.
• Evidence of control operation throughout the year.
• Supervisory review signoffs.
• Exception reports and remediation documentation.
• Change management records for systems and processes.
• Documentation supporting management's compliance assertions.

8. If Filing an Exemption Report, Support the Exemption With Evidence

Noncarrying broker-dealers that claim an exemption under SEC Rule 15c3-3(k) generally file an exemption report specifying the exemption relied upon and stating whether the firm met the exemption provisions throughout the year, with exceptions described if applicable. SEC Rule 17a-5 also requires the exemption report to identify the relevant exemption provision, state whether the exemption was met throughout the fiscal year, and identify and describe exceptions, if any.

For an exemption report reviewed under PCAOB Attestation Standard No. 2, be ready to support:

• The specific exemption claimed.
• The firm's business activities during the year.
• Clearing agreement terms.
• Customer funds and securities handling practices.
• Exception logs and investigations.
• Evidence that exceptions were evaluated and disclosed when required.

The most common issue is not that an exception occurred; it is that the firm did not identify, evaluate, document, and communicate the exception promptly.

9. Coordinate SIPC, DEA, SRO, SEC, and State Filing Requirements

Filing logistics are part of audit readiness. Copies of annual audited financial statements, supplemental schedules, the independent public accountant's report, and either the compliance report and examination report or exemption report and review report should be filed with the SEC, the designated examining authority, applicable self-regulatory organizations, SIPC if the broker-dealer is a member, and in certain circumstances states where the broker-dealer is registered.

Broker-dealers that are SIPC members must file annual reports with SIPC concurrently with the SEC filing, and broker-dealers are required to file an agreed-upon procedures report prepared by the independent public accountant over the SIPC Form SIPC-7 or SIPC-3 filing.

Also note that SEC amendments require broker-dealers and nonbank security-based swap entities to file annual audited reports and Form 17-H electronically on EDGAR beginning June 30, 2025.

Broker-Dealer Audit Readiness Checklist

Use this checklist to assess whether your team is prepared before the audit begins.

Financial Reporting

• Final trial balance is closed and reviewed.
• Bank reconciliations are complete.
• Clearing broker statements are reconciled.
• Revenue and expense analytics are prepared.
• Related-party transactions are identified and supported.
• Subordinated borrowings and equity activity are documented.
• Draft financial statements and footnotes are prepared.
• Subsequent events review process is scheduled.

Regulatory Computations and Schedules

• Net capital computation under SEC Rule 15c3-1 is complete.
• Nonallowable assets and haircuts are reviewed.
• Reserve computations under SEC Rule 15c3-3 are prepared, if applicable.
• Possession-or-control support is assembled, if applicable.
• SEC Rule 17a-13 security count records are available, if applicable.
• Supplemental schedules required by SEC Rule 17a-5 are drafted.
• FOCUS Report reconciliations or no-material-difference statements are prepared.

Compliance or Exemption Reporting

• Filing path is confirmed: compliance report or exemption report.
• Compliance report assertions are supported, if applicable.
• Internal Control Over Compliance documentation is complete, if applicable.
• Exemption claimed under SEC Rule 15c3-3(k) is documented, if applicable.
• Exceptions are identified, evaluated, and described where required.
• Management has reviewed the report for completeness and accuracy.

Audit Support and Project Management

• Prepared-by-client list is assigned to owners.
• Audit evidence is organized in a secure portal.
• Key personnel availability is confirmed.
• Legal letters and confirmations are in process.
• Management representation letter timing is agreed.
• Filing responsibilities are assigned.
• SIPC, FINRA, SRO, SEC, and state filing requirements are confirmed.

Common Pitfalls to Avoid

1. Waiting Until Year-End to Evaluate Exemption Status

If your firm files an exemption report, the exemption analysis should be ongoing. A new business activity, change in customer handling, or operational exception may affect whether the firm met the exemption throughout the year.

2. Incomplete Support for Net Capital Adjustments

Auditors will expect clear support for nonallowable assets, haircuts, liabilities, and minimum capital requirements. Unsupported assumptions can delay the audit and may create regulatory concerns.

3. FOCUS Report Differences Without Explanations

Differences between audited supplemental schedules and the most recent unaudited FOCUS filing should be reconciled and explained, unless there are no material differences and a statement is made that reconciliation is not necessary.

4. Treating Internal Controls as Informal Practices

For compliance report filers, undocumented controls are difficult to audit. If a review occurred, retain evidence. If an exception was resolved, document the issue, analysis, approval, and remediation.

5. Overlooking SIPC and Other Filing Requirements

Audit completion is not the finish line. Firms should confirm where reports must be filed, including the SEC, designated examining authority, SROs, SIPC, and applicable states.

6. Underestimating the Timeline

A 60-day deadline leaves little room for late schedules, unresolved confirmations, or open compliance questions. Start planning before the fiscal year closes.

Final Thoughts

Preparing for a broker-dealer audit is a cross-functional effort. Finance owns the numbers, compliance owns the regulatory assertions, operations owns many of the underlying processes, and leadership owns the tone and accountability.

The strongest audit outcomes usually come from firms that:

• Maintain audit-ready records throughout the year.
• Review net capital and customer protection obligations regularly.
• Document controls and exceptions as they occur.
• Coordinate early with auditors and regulatory filing owners.
• Treat the annual audit as part of the firm's broader compliance culture.

With the right preparation, the broker-dealer audit can be less disruptive, more predictable, and more valuable as a check on the firm's financial and regulatory reporting discipline.