The Captive Audit

Why statutory audit should be a public function, not a private profit centre

Share

The argument in one paragraph

Statutory audit is a service the law compels companies to buy, supplied by four firms that control almost the entire large-company market, sold to the very managers it is supposed to police, and priced to generate partner profits that bear no relation to the cost of the work. It repeatedly fails at the one task that justifies its existence — and when it fails, no one is held to account in any way that bites. This is not a free market that occasionally misfires. It is a licensed franchise whose structure produces rent, softness and impunity by design. And in January 2026 the government, handed a decade of ready-made remedies, chose to scrap them — confirming that the private model will not be reformed from within and must instead be replaced. The remedy is to take statutory audit out of the private profit motive and run it as the public-interest function it has always claimed to be.

A market that is not a market

Begin with the thing most commentary skates over: large-company audit is not bought freely and is not sold competitively. The law requires every listed company and most large entities to be audited, so demand is mandatory. On the supply side, four firms — Deloitte, EY, KPMG and PwC — audit the entire FTSE 100 and, on the regulator's own competition figures, collect around 98% of FTSE 350 audit fees. The “challenger” firms exist mainly to be cited in consultations.

A compulsory product supplied by four firms that no one can undercut is not a market in any meaningful sense. It is a collective monopoly operating behind the language of professional services. And the predictable consequence of mandatory demand meeting a four-firm supply is pricing power: the fee floats at whatever the cartel can sustain, because the buyer has nowhere else to go and the law forbids it from going without.

The firms manage this position deliberately. Their headline internal metric is profit per equity partner, and they protect it the way any rationing monopolist would — by restricting the number of partners admitted to share the spoils. When revenues soften, they freeze promotions to keep the per-head number high. A business genuinely paid for the value it adds does not throttle its own senior headcount to defend a margin. A cartel managing scarcity does exactly that.

The rent, and who actually earns it

In the most recent UK results the average equity partner took home somewhere between roughly £790,000 and £1.05 million, depending on the firm — across approximately three thousand partners. Set that beside the people who actually do the work and the picture inverts. The high-volume labour of an audit — reconciliations, vouching, data extraction, populating workpapers — is increasingly performed in offshore delivery centres in India, Poland and the Philippines, by staff earning a fraction of a Western salary. The grunt work is cheap and getting cheaper. The judgement-heavy work that remains onshore is thin, and the genuinely scarce technical skill — valuing complex instruments, setting insurance reserve assumptions — largely sits inside the audited banks and insurers themselves; the auditor's role is to review and challenge those numbers, not to originate them.

So the partner's seven-figure draw is not a return to irreplaceable expertise. It is the residual of a captive market, distributed among the owners of the partnership after the cheap labour has been paid. It is rent. And rent, by definition, is money extracted in excess of what the service costs to provide competently — money that, in any client company, could have funded investment, wages or returns to shareholders. Per company the fee is modest; on US data, audit costs run to only a few hundred dollars per million of revenue. But in aggregate it is a substantial annual transfer from the productive economy to a few thousand individuals, sustained by nothing more than a legal mandate and the absence of anyone permitted to compete it away.

The conflict that guarantees softness

The deeper rot is not the price. It is who pays it. The auditor is hired, paid and effectively chosen by the management of the company being audited — yet the audit exists to protect other people from that management: shareholders, lenders, pensioners, the public. The party that benefits from a tough audit is not the party that signs the cheque.

This is the oldest problem in the trade, and it does not produce bullying. It produces the opposite: an auditor who depends on the client for the fee, for reappointment, and historically for lucrative consulting work has every incentive to keep that client comfortable. The failure mode is not the firm strong-arming the company. It is the firm going soft on the management feeding it. Enron, Carillion, BHS — these were not audits that menaced their clients. They were audits that declined to challenge them. He who pays the piper calls the tune, and the tune is “do not make trouble.”

No amount of professional-scepticism training fixes an incentive structure pointed in the wrong direction. As long as the audited entity is the auditor's paymaster, the audit is being asked to be adversarial toward the hand that feeds it. It mostly declines.

The failures, and the accountability vacuum

Three decades supply the evidence. Enron destroyed Arthur Andersen in 2001–02. Carillion collapsed in 2018 with billions in hidden liabilities and thousands of jobs, pensions and suppliers behind it. BHS, Thomas Cook, Patisserie Valerie, Wirecard, Madoff — the list is long, and the pattern is constant: the audit misses precisely the thing it is paid to catch.

What is more revealing is what follows a failure. In the United States, Andersen's criminal conviction was for shredding documents, not for the Enron audit — and the Supreme Court unanimously overturned even that. Madoff's auditor pleaded guilty to filing false audit reports and served no prison time. In the United Kingdom the position is starker still: during the regulator's inspection of the Carillion audit, KPMG personnel were found to have forged documents and lied to the regulator. The consequence was a fine — reduced for cooperation — and professional bans. Forging documents to deceive the statutory regulator drew no criminal charge at all.

Now hold that beside the comparison that exposes the whole edifice. An NHS doctor can be convicted of gross negligence manslaughter for a single clinical error made under pressure on a busy ward, struck off, and have their career ended — for a fraction of an audit partner's pay. The auditor who signs off accounts that later vaporise billions faces, at worst, a fine the firm absorbs as a cost of doing business. We reserve criminal jeopardy for the underpaid profession that saves lives and extend near-total impunity to the overpaid one that certifies balance sheets. That asymmetry is not an accident of law. It is what capture looks like when an industry is treated as too systemically important to discipline.

What audit is worth — and what it is not

To indict the structure is not to deny that audit does something real. Independent verification of a company's accounts solves a genuine economic problem: without it, investors cannot tell honest accounts from cooked ones and price every company as a potential fraud, raising the cost of capital for everyone. A credible signature lowers that cost and lets strangers fund businesses they cannot personally inspect. The function has value, and any serious reformer should say so plainly.

But the value lives in the function, not in the ownership. Nothing about the economic usefulness of verification requires that it be supplied by four profit-maximising partnerships selling to the firms they audit. The rent and the conflict are not the price of the value; they are dead-weight and risk that the private structure bolts on top of it. And the largest cost of the broken structure is not the fee at all — it is the failure. When a Carillion collapses because the watchdog did not bark, the loss to employees, pensioners, suppliers and the public dwarfs every audit fee that firm ever charged. That is the true bill, and it is paid by everyone except the auditor.

The government's abdication

If the oligopoly is the disease, the government has just declined to administer the cure it spent a decade preparing.

After Carillion collapsed in 2018, three official reviews recommended an arsenal of remedies: a powerful new regulator with real enforcement teeth, mandatory shared audits to break the four-firm grip, caps on the Big Four's market share, structural separation of audit from consulting, and a positive legal duty on auditors to detect fraud. None of this was radical. It was the minimum, market-preserving package needed to introduce competition and re-point the incentives, and it carried broad professional and cross-party support. The new regulator — the Audit, Reporting and Governance Authority that was to replace the Financial Reporting Council — was promised in the 2024 King's Speech.

Then, in January 2026, the government scrapped the entire Audit Reform and Corporate Governance Bill. The new regulator was abandoned. Shared audits had already been ruled out; so had any cap on the Big Four's market share. The stated justification was that the reforms would be too costly for large companies, and that the priority was instead to free business up for growth and competitiveness. The only measure left standing was the feeblest — an internal, “operational” separation of audit from consulting that leaves the four firms wholly intact and under one roof.

Read that decision for what it is. A captive market that extracts rent from the productive economy, polices the powerful on behalf of a public it does not answer to, and has failed repeatedly at catastrophic cost, was handed to the government for repair. The government chose the comfort of the four firms over the protection of everyone the audit is supposed to serve. “Too costly for companies” is, in this context, a euphemism: the cost being avoided is the cost of being effectively audited, and the growth being protected is profit per partner. After a decade of reviews triggered by the wreckage of Carillion, BHS and Thomas Cook, the considered response of the British state was to formally abandon the remedy and leave the structure precisely as the people who profit from it would wish. That is not neutrality. It is a government declining to act against an entrenched extraction it has the power to end — and thereby owning it.

This is the decisive fact for anyone still weighing public ownership against incremental reform. The incremental route has now been tested to destruction: proposed, diluted, delayed, and finally discarded — not because it would not have worked, but because the political will to impose it on a well-resourced, well-connected oligopoly does not exist. Those who counsel patience and gradualism are recommending a path Westminster has just bulldozed. The choice is no longer between public ownership and gentle private reform. It is between public ownership and a status quo the government has explicitly chosen to preserve.

The case for a public function

The principle is simple and ought to be uncontroversial: the verification of the powerful should not itself be a private profit centre owned by the people it serves least. Statutory audit — at minimum for public-interest entities such as listed companies, large private firms, banks and government contractors — should be a public function. Auditors should be appointed and funded independently of the entity audited; they should be salaried professionals rather than profit-sharing partners; the rent should be removed and the payer-conflict severed at the root.

The standard objection is talent: that public pay scales cannot retain the expertise. It does not survive contact with how audits are actually staffed. The volume work is already offshored and cheap, and would remain so under public provision. The genuinely scarce valuation skill sits with the audited firms, not the auditor. And the thin middle layer of skilled reviewers is demonstrably employable on public terms — the Government Actuary's Department already employs actuaries doing complex statutory valuation, and the National Audit Office already audits central government with salaried civil servants. The “brain drain” would consist largely of the rent-takers at the top, whose departure is the objective, not the cost.

The objections that do carry weight should be met head-on, not waved away:

•      Political capture. A public auditor's paymaster becomes the state — itself the single largest interested party, as shareholder, bank guarantor and, in Carillion's own case, the contractor. The answer is institutional independence of the kind Britain already builds: the National Audit Office reports to Parliament rather than ministers; the Office for Budget Responsibility and the operationally independent central bank show that statutory verification functions can be insulated from the government of the day. The design problem is real but solved elsewhere.

•      Single point of failure. One public body has no rival to expose its mistakes. The answer is plurality within public provision — regional or multiple public auditors — or, at the cautious end of the spectrum, retaining plural private firms while severing the payer link.

•      International recognition. A national body's opinion may not travel for a global multinational. The answer is to bound the model to domestic and public-interest scope and to build on existing mutual-recognition frameworks.

These define a spectrum rather than a single switch. At the minimum acceptable end sits the surgical reform: keep audit firms plural, but have them appointed and paid by an independent public body funded through a levy, so that no auditor ever again depends on the company it polices. At the maximal end sits a fully public statutory-audit service for public-interest entities. The minimum severs the conflict; the maximum removes the rent as well. After a decade in which the private market has defeated every attempt to reform it from within, the burden of proof has shifted: it now lies on those who insist the function must remain private.

Conclusion

The audit oligopoly occupies a position most businesses can only dream of: a product the law forces its customers to buy, sold by four firms no one can undercut, to the very managers it is meant to hold to account, at prices that make its owners rich and its failures consequence-free. It is defended not by the value it adds but by the absence of anyone allowed to compete it away. And in January 2026 the one body with the power to break it open — the government — looked at a decade of remedies sitting on its desk and swept them off, in the name of sparing companies the burden of being properly audited.

That is the point at which the argument settles. A function that exists to protect the public interest should answer to the public, not to the management it polices, the partners who profit from it, or a government that has just chosen the firms' convenience over the public's protection. Verification of the powerful is too important to be left as a captive private franchise — and far too important to be left to a state that, handed the means to fix it, declined. It should be a public function. Every time the private model is asked to reform itself and refuses, and every time the government is asked to compel it and walks away, the case for making it one grows harder to answer.