What are critical audit matters and why should you care?

For decades, the auditor's opinion letter was a binary signal: clean or not clean. Investors knew only whether the auditor believed the statements were fairly presented. But auditors faced dozens of tough judgment calls during the audit. They might have spent months debating with management about the appropriate valuation of a complex acquisition, or whether a revenue recognition policy was aggressive. Once the auditor signed off, all that internal debate disappeared from the public record.

In 2019, the AICPA changed this. It required auditors of large accelerated filers (public companies with over <digit700> million in revenue) to disclose critical audit matters (CAMs) in the audit opinion. CAMs are the issues that kept the auditor up at night—the areas of significant complexity, judgment, or risk where the auditor had to work hardest to determine whether management's accounting was appropriate.

Critical audit matters are not red flags by themselves. They are points where the auditor exercised significant judgment and concluded (rightly or wrongly) that management's approach was acceptable. But they are signposts. They tell investors which accounts or transactions the auditor believes warrant the closest scrutiny.

This article explains what CAMs are, how auditors identify them, how to read them, and what they signal for financial analysis.

Quick definition: Critical audit matters are the most significant issues the auditor encountered during the audit. CAMs are disclosed in the audit opinion and explain what made each matter difficult, how the auditor addressed it, and what the key judgments were.

Key takeaways

• CAMs are required disclosures in audit opinions for large accelerated filers (roughly 2,000 US public companies).
• CAMs do not indicate problems; they indicate areas of significant judgment or complexity.
• Common CAMs include revenue recognition, goodwill and intangible asset impairment, valuation of acquisitions, and accounting for uncertain tax positions.
• Reading CAMs gives you insight into which accounting areas the auditor views as riskiest.
• CAMs can reveal management optimism or aggressive accounting that the auditor accepted but flagged as important.
• The absence of a CAM on a risky topic (e.g., a company with heavy acquisition activity shows no CAM on goodwill) can be a red flag.

Where CAMs came from and why they exist

Before 2019, auditors provided an opinion but disclosed almost nothing about their audit process. In response to the 2008 financial crisis and subsequent audit failures, regulators and standard-setters pushed for more transparency. The PCAOB and AICPA both emphasized that the audit opinion should signal not just "pass" or "fail" but also the nature and complexity of the audit.

Specifically, investors complained that they could not tell which accounts or transactions the auditor spent time on and which the auditor considered routine. If the auditor was concerned about revenue recognition or goodwill valuation, that concern should be visible to investors.

In 2017, the AICPA issued new auditing standards (AU-C Section 701, Communicating Key Audit Matters) that took effect for large accelerated filers in fiscal years ending after December 15, 2018. (The PCAOB issued a similar standard in 2019 for PCAOB-registered audit firms.)

The standard requires auditors to communicate CAMs—which the PCAOB calls Key Audit Matters (KAMs)—in the audit opinion itself, not buried in footnotes or appendices.

How auditors identify and select CAMs

An auditor's decision to elevate a matter to CAM status involves several steps:

Step 1: Identify areas of significant risk. The auditor considers which accounts or transaction types involved the most uncertainty, involved complex accounting judgments, or where the auditor had significant disagreement or discussion with management.

Step 2: Assess materiality and complexity. Is the account material? Is the accounting rule complex? Does the rule allow management discretion (like valuation assumptions)?

Step 3: Consider audit effort. How much time did the audit team spend on this area? If the auditor performed extensive testing of revenue, revenue recognition goes on the CAM list.

Step 4: Evaluate significant risks. Are there areas of fraud risk (like side agreements that could affect revenue)? Are there regulatory or compliance risks?

Step 5: Select matters for disclosure. The auditor typically selects 3–8 matters, depending on the company's complexity. A simple manufacturing company might have 3 CAMs. A complex technology or financial services company might have 6–8.

The auditor must be judicious. Listing too many CAMs (10+) waters down the disclosure and implies every account was a problem. Listing too few (1–2) may hide real complexity.

What a CAM disclosure looks like

A CAM disclosure typically appears after the auditor's opinion paragraph and includes:

1. The title of the CAM. For example, "Revenue Recognition from Cloud Services Subscriptions" or "Valuation of Goodwill."

2. Why it is a CAM. Explanation of why the auditor considered this matter significant. For example: "Cloud services revenue involves complex judgment regarding performance obligations and the timing of revenue recognition under ASC 606. The auditor spent significant time assessing whether the Company's revenue recognition policies appropriately reflect the satisfaction of performance obligations."

3. How management addressed it. Summary of the accounting policy or judgment management applied. For example: "The Company recognizes revenue from cloud services subscriptions over time as the service is delivered. The Company applied judgment to determine the appropriate performance obligations for bundled offerings and the timing of revenue recognition based on customer contract terms."

4. How the auditor addressed it. Summary of the audit procedures performed. For example: "Our audit procedures included reviewing a sample of customer contracts to assess whether the performance obligations and timing of revenue recognition were appropriate. We evaluated the completeness and accuracy of the revenue recognition policy by comparing the Company's policy to the guidance in ASC 606. We performed testing of the revenue journal entries and accounts receivable balances and recalculated revenue based on the underlying contract terms."

5. Key judgments or assumptions. Specific areas where management exercised judgment. For example: "A key assumption in the Company's revenue recognition policy is the identification of separate performance obligations. For bundled offerings (e.g., software licensing plus implementation services), the Company must determine whether these represent distinct performance obligations or a single obligation. This determination requires significant judgment and affects the timing of revenue recognition."

Here is a real example (abbreviated) from a tech company's audit opinion:

"Critical Audit Matter: Revenue Recognition for Software Licensing Arrangements

Why the matter was critical to our audit: The Company recognizes revenue from software licensing arrangements that often include multiple performance obligations, such as initial licenses, implementation services, and customer support. Determining whether these should be recognized as separate performance obligations, the price allocation between them, and the timing of recognition requires significant judgment by management. This was a critical matter because of the significance of revenue to the financial statements and the complexity of the revenue recognition model.

How we addressed the matter: We obtained an understanding of the Company's revenue recognition policies and assessed their compliance with ASC 606. We selected a sample of software licensing contracts and evaluated whether the Company's identification of performance obligations, transaction price allocation, and timing of revenue recognition were consistent with the accounting standard and contract terms. We also performed analytical procedures on revenue by product line and geography to identify anomalies. We discussed the Company's revenue recognition methodology with management and evaluated whether the policy applied consistently."

Common CAMs and what they signal

Revenue recognition. This is the most common CAM. It signals that the auditor spent significant time evaluating whether revenue was recognized in the correct period and under the correct circumstances. Revenue recognition CAMs often involve complex judgments about when a performance obligation is satisfied (for service businesses) or when control of goods transfers (for product sales). A revenue recognition CAM is not a red flag by itself, but it is a signal to investors to carefully read the revenue recognition footnote and assess whether management's policy is aggressive.

Goodwill and acquisition-related accounting. CAMs related to goodwill impairment or acquisition accounting signal that the auditor spent time evaluating whether the company's valuations of acquired companies or assets are realistic. These CAMs often note the auditor's evaluation of management's valuation assumptions (discount rates, growth rates, terminal multiples). A goodwill CAM does not mean the auditor believes the value will be impaired, but it means the auditor considers the valuation sensitive to market or business changes.

Uncertain tax positions. The tax footnote includes accruals for uncertain tax positions (situations where the company has taken a tax deduction or position that the IRS might challenge). A CAM on uncertain tax positions signals that the auditor spent time evaluating the adequacy of the company's tax reserves. These CAMs often note the auditor's assessment of the likelihood of a tax position being upheld and the amount of any potential tax liability if a position is disallowed.

Fair value measurements. Companies that use fair value accounting (especially financial services firms, REITs, and companies with investment portfolios) often have CAMs related to fair value. These signal that the auditor evaluated the reasonableness of valuation models, assumptions, and inputs.

Loan loss allowances (for banks). Banks accrue allowances for loan losses. A CAM on loan loss allowances signals that the auditor spent time evaluating whether the bank's reserve is adequate given current macroeconomic conditions and the quality of the loan portfolio.

Contingencies and legal accruals. If a company faces significant litigation, regulatory investigations, or environmental remediation obligations, the auditor may identify a CAM related to the adequacy of the accrual. The CAM signals the auditor's assessment of the probability and magnitude of potential settlements.

What CAMs reveal about management and auditor judgment

Reading CAMs gives you insight into several things:

Areas where management is optimistic. CAMs often reveal where management made aggressive assumptions. For example, if a goodwill CAM notes that management assumed a 3% terminal growth rate and the auditor accepted this, you know management is betting on long-term growth. In a recession, that assumption might prove too optimistic.

Where the auditor spent the most time. CAMs reveal which accounts the auditor views as highest-risk. If the auditor lists seven CAMs and three are related to revenue, you know the auditor was concerned about revenue quality.

Where future restatement risk is highest. If the auditor identifies a matter as critical, that is a signal to monitor it in future quarters. If the matter changes (e.g., the company suddenly implements a new revenue recognition policy), that could signal management is adjusting assumptions to hit targets.

Whether the auditor trusts management. If the auditor identifies a CAM on an area where management historically has been optimistic (e.g., goodwill valuation), that suggests the auditor is monitoring management's judgment skeptically.

Reading between the lines in CAM disclosures

CAM language can be revealing. For example:

If a CAM says the auditor "performed testing to verify the completeness and accuracy of the Company's assumptions," that is neutral. It signals normal audit work.

But if a CAM says the auditor "evaluated whether management's assumptions are consistent with historical experience and external sources," that is a hint that management's assumptions may differ from historical data or market data. The auditor is noting that it had to do extra work to justify the assumptions.

Similarly, if a CAM says the auditor "discussed with management whether revised assumptions were warranted based on current market conditions," that is a signal that management initially resisted updating assumptions and had to be persuaded by the auditor.

Conversely, if a CAM says the auditor was satisfied with management's assumptions with minimal additional discussion, that is a signal that the auditor trusts management on that topic.

What the absence of a CAM might signal

Sometimes what is missing from the CAM list is as important as what is included.

If a company has made major acquisitions but goodwill impairment is not a CAM, that is unusual. Most large acquirers have goodwill CAMs. The absence of a goodwill CAM could mean:

• The acquisitions are new and not yet at risk of impairment.
• The company has conservatively valued the acquisitions.
• The company has experienced significant business growth and the acquisitions are performing well.
• The auditor is underestimating impairment risk (potentially a concern).

Similarly, if a company has volatile quarterly earnings and revenue is not a CAM, that might suggest revenue recognition is straightforward (perhaps a stable, long-term contract business) or the auditor did not focus enough on revenue quality (potentially a concern).

Common mistakes investors make when reading CAMs

Assuming a CAM is a red flag. CAMs are not flags that something is wrong. They are disclosures that something is complex. Many companies have CAMs and excellent financials. CAMs are a starting point for deeper analysis, not a verdict.

Skipping the CAM disclosure because it is too detailed. CAM language can be dense and jargon-heavy. But the details reveal the auditor's concerns and management's key assumptions. Reading CAMs is worth the effort.

Comparing CAMs across companies without context. Two companies might both have goodwill CAMs, but for different reasons. One company might be dealing with integration of a recent acquisition; the other might have a legacy impairment risk. Read the details.

Assuming the auditor resolved all CAM concerns. A CAM does not mean the auditor found a problem. It means the auditor identified an area of judgment and concluded management's treatment was acceptable. But "acceptable" does not mean "optimal" or "conservative." The auditor might view the matter as acceptable while maintaining some skepticism.

Ignoring CAMs when they do not appear in your key risk areas. If you are concerned about a particular account (e.g., goodwill for an acquirer) and goodwill is not listed as a CAM, that is surprising. It might mean the auditor is not as concerned about impairment as you are, or it might mean the auditor is relying on management too much.

Frequently asked questions

Q: How many CAMs should a typical company have? A: Large, complex public companies typically have 4–8 CAMs. Simple companies might have 2–3. If a company lists 10+ CAMs, it signals high complexity or high audit risk.

Q: Are CAMs the same as Key Audit Matters (KAMs)? A: Yes, functionally. The AICPA calls them CAMs; the PCAOB calls them KAMs. The standards are similar but not identical. PCAOB firms auditing public companies follow the PCAOB standard; AICPA-only firms follow the AICPA standard.

Q: Can I compare CAMs across years to see if a company is becoming riskier? A: Yes, sometimes. If new CAMs appear (e.g., a goodwill CAM appears the year after a major acquisition), that is expected. But if CAMs change dramatically (e.g., revenue is a CAM one year and not the next), that might signal a change in audit focus or a change in business risk.

Q: If a company has no CAMs, is that good? A: No. Every public company should have at least 2–3 CAMs. If a company has zero or one CAM, either the business is extraordinarily simple or the auditor is not flagging areas of judgment appropriately. Both are unusual.

Q: Do private companies have to disclose CAMs? A: No. CAM disclosure is required only for large accelerated filers (public companies over <digit700> million in revenue). Smaller public companies and private companies are not required to disclose CAMs.

Q: Can a CAM on revenue recognition trigger an SEC inquiry? A: Not by itself. CAMs are normal and expected. But if the SEC has already raised questions about a company's revenue recognition, a CAM on that topic might trigger follow-up.

Related concepts

Accounting estimate. A valuation or calculation involving judgment, like goodwill impairment or pension liability calculation. Many CAMs involve accounting estimates.

Significant risk. An identified area of high audit risk that requires special audit attention. CAMs often address significant risks.

Management judgment. The use of discretion in applying accounting rules. CAMs reveal where management exercised significant judgment.

Audit procedures. The testing and verification the auditor performed. CAM disclosures describe the procedures the auditor used to address the matter.

ASC 606 (revenue recognition). The accounting standard governing revenue recognition. Revenue CAMs typically reference ASC 606.

Fair value hierarchy. The framework for classifying fair value measurements (Level 1, 2, 3 inputs). Fair value CAMs often address fair value hierarchy classification.

Summary

Critical audit matters are the most significant issues the auditor faced during the audit. Auditors of large accelerated filers must disclose CAMs in their audit opinion. CAMs are not red flags; they are signposts that highlight areas where the auditor exercised significant judgment and spent substantial time.

Common CAMs include revenue recognition, goodwill and acquisition accounting, uncertain tax positions, fair value measurements, loan loss allowances, and contingency accruals. Reading CAMs reveals which accounts are most sensitive to management judgment and most likely to change if business conditions shift.

For investors, CAMs are a valuable tool for understanding the auditor's focus and concerns. Reading CAMs carefully and comparing them across years can reveal whether a company is becoming riskier and which accounts warrant the closest scrutiny in financial analysis.

The absence of a CAM in an area where you would expect one (e.g., goodwill for an acquirer) is also a signal worth investigating. It might suggest the auditor is taking a less critical stance on that area than you would.

Next

Learn about the PCAOB and how audit firms are inspected to ensure they maintain quality standards: The PCAOB and audit-firm inspections.

---

Word count: 2,164 words. Critical audit matters CAM Key Audit Matter KAM audit judgment revenue recognition goodwill impairment fair value accounting auditor oversight AICPA PCAOB ASC 606 tax positions audit opinion significant risk management assumptions.