The Finding That Changed the Auditor’s Relationship with the Regulator

The external auditor of a Caribbean insurance company had completed the annual audit and issued an unqualified opinion on the financial statements. The audit had been competently conducted, the financial statements presented fairly, and the opinion was appropriate. But when the regulator conducted its on-site examination three months later, the examination team identified material weaknesses in the company’s internal controls that the auditor had observed during the audit but had not communicated to the regulator.

Specifically, the auditor had noted during the audit that the company’s claims reserving process relied heavily on the judgement of a single actuary without independent peer review, that the investment portfolio contained concentrations in asset classes that appeared inconsistent with the company’s stated investment policy, and that the reinsurance recoverable calculations had not been reconciled to the reinsurer’s records for over twelve months. The auditor had communicated these observations to management through the management letter, and management had acknowledged them and committed to remediation. The auditor had also discussed the observations with the audit committee in broad terms during the year-end meeting.

What the auditor had not done was communicate these observations to the financial services regulator. The auditor’s position was that the management letter was addressed to management and the audit committee, that the observations did not constitute reportable matters under the existing regulatory framework as the auditor understood it, and that the auditor’s primary obligation was to report on the financial statements, not to serve as an extension of the regulatory examination function.

The regulator disagreed. The regulatory framework had been updated eighteen months earlier to strengthen the expectations placed on external auditors of regulated financial institutions. The updated framework required auditors to report to the regulator any matter identified during the course of the audit that, in the auditor’s professional judgement, was likely to be of material significance to the regulator’s supervision of the institution. The claims reserving concentration, the investment policy inconsistency, and the reinsurance reconciliation gap all met this threshold, in the regulator’s assessment.

The consequences were significant but not punitive. The regulator issued a formal communication to the audit firm requiring confirmation that the firm’s audit methodology had been updated to incorporate the enhanced reporting obligations. The regulator required the insurance company to engage the auditor to perform an expanded scope engagement in the following year, covering the specific areas identified as deficient. And the regulator noted, in its supervisory file, that the audit firm’s awareness of the regulatory reporting framework for auditors of regulated entities appeared to be incomplete — a notation that would inform the regulator’s assessment of the firm’s capability for future engagements.

The audit partner’s reflection, shared candidly with his firm’s leadership team, captured the shift that had occurred: “The relationship between the auditor and the regulator has changed fundamentally. We are no longer merely reporting on financial statements that happen to belong to a regulated entity. We are participants in the supervisory framework, and the regulator expects us to act accordingly.”

This fictional scenario, while not attributable to any specific Caribbean insurance company or audit firm, reflects a transformation in the relationship between external auditors and Caribbean financial regulators that is reshaping audit engagements across the region’s financial services sector.

The Evolving Regulatory Landscape for Audit

Caribbean financial regulators have significantly strengthened their expectations of external auditors and audit committees over the past decade. This strengthening reflects three converging forces: the lessons learned from financial institution difficulties across the region, the influence of international supervisory standards, and the Caribbean Financial Action Task Force mutual evaluation process that has driven comprehensive upgrades to governance, compliance, and supervisory frameworks across the region.

Financial Services Commission of Jamaica (FSC): The FSC has progressively enhanced its governance expectations for regulated entities, including specific requirements for audit committee composition, independence, and functionality. The FSC’s corporate governance guidelines for securities dealers, insurance companies, and pension funds establish expectations for audit committee financial expertise, meeting frequency, and oversight of both external and internal audit. The FSC’s on-site examination methodology assesses audit committee effectiveness as a core component of the governance evaluation, and examination findings related to audit committee deficiencies carry remediation obligations.

Central Bank of Trinidad and Tobago (CBTT): The CBTT’s supervisory framework for banks and insurance companies includes expectations for external auditor reporting that go beyond the financial statement opinion. The CBTT has authority to require expanded scope audit engagements, to direct auditors to perform specific procedures, and to require auditors to report matters of supervisory concern directly to the regulator. The CBTT’s corporate governance guidelines establish detailed requirements for audit committee composition, mandate, and operations.

Cayman Islands Monetary Authority (CIMA): CIMA’s regulatory framework for banks, insurance companies, securities entities, and fiduciary service providers includes requirements for external auditor engagement with the supervisory process. CIMA expects auditors to report matters of regulatory significance, and the Authority has the power to direct additional audit procedures where supervisory concerns warrant enhanced assurance.

Eastern Caribbean Central Bank (ECCB): The ECCB’s supervisory framework for banks in the Eastern Caribbean Currency Union includes expectations for external auditor reporting and audit committee governance. The ECCB’s recent strengthening of its supervisory capacity has included the development of more detailed expectations for the role of external auditors in the supervisory process.

Regional Convergence: Across the Caribbean, there is a clear convergence toward stronger regulatory expectations for auditors and audit committees. Regulators expect auditors to be participants in the supervisory framework, not merely providers of financial statement opinions; they expect audit committees to be genuinely functional governance mechanisms; and they expect both to engage proactively with the regulatory process.

What Regulators Now Expect from External Auditors

Reporting Matters of Regulatory Significance: The most consequential regulatory expectation is the obligation to report matters of regulatory significance to the supervisor. Reportable matters typically include material weaknesses in internal controls, significant deficiencies in governance processes, indications of non-compliance with prudential requirements, concerns about going concern status, unusual or suspicious transactions, and any matter likely to affect the regulator’s assessment of the entity’s safety and soundness. This reporting obligation exists alongside the auditor’s reporting to management and the audit committee. The auditor must exercise professional judgement in determining which matters meet the threshold, and must maintain documentation supporting the judgement.

Expanded Scope Engagements: Caribbean regulators increasingly have authority to require expanded scope audit engagements beyond the standard financial statement audit. These engagements may require additional procedures on asset quality, provisioning adequacy, capital adequacy, AML/CFT compliance, IT controls, or governance processes. The expanded scope engagement leverages the auditor’s access to provide the regulator with assurance on matters the standard audit does not cover.

Auditor Competence and Quality: Regulators are paying increasing attention to the competence and quality of external auditors who audit regulated entities. Some jurisdictions require regulatory approval before appointment, and regulators assess industry expertise, team composition, quality control, and track record. A weak auditor is a supervisory risk factor the regulator will seek to address.

Engagement with the Supervisory Process: Regulators expect auditors to engage constructively: responding to enquiries, participating in supervisory meetings when requested, providing access to working papers where permitted, and maintaining awareness of regulatory developments affecting audited entities. The auditor who completes the audit, issues the opinion, and disengages until the following year is not meeting this expectation.

What Regulators Now Expect from Audit Committees

Composition with Genuine Expertise and Independence: Regulators expect audit committees of regulated entities to include members with genuine financial expertise — specific knowledge of financial reporting, audit processes, internal controls, and the applicable regulatory framework. Independence is assessed substantively: the regulator evaluates whether members have the willingness and ability to challenge management. Several Caribbean regulators have authority to require changes to committee composition where expertise or independence is lacking.

Functional Oversight, Not Ceremonial Presence: Regulatory assessment goes beyond checking whether the committee exists and meets. Regulators evaluate the quality of engagement with financial reporting, the depth of interaction with auditors, the substance of internal controls and compliance oversight, and the quality of reporting to the full board. Findings of perfunctory or ceremonial committees carry remediation obligations including mandatory training, composition changes, or enhanced monitoring.

Oversight of the Regulatory Relationship: Regulators expect the audit committee to oversee the entity’s regulatory relationship: ensuring prompt response to findings, timely remediation, board awareness of significant communications, and governance arrangements meeting regulatory expectations. The audit committee ensures regulatory compliance is a governance priority, not merely an operational function.

Direct Communication Channel with the Regulator: Some Caribbean regulators have established or are establishing direct communication channels with audit committees. This may include meeting the committee without management present, communicating supervisory concerns directly, and expecting the committee to raise concerns when management is not adequately addressing deficiencies. This parallels the committee’s private meeting with the external auditor.

The Consequences of Falling Short

Caribbean regulators have demonstrated increasing willingness to use enforcement tools when audit and governance expectations are not met.

For the Regulated Entity: Findings can result in required Board Action Plans with specific timelines, enhanced supervisory monitoring with increased examination frequency, restrictions on business activities including expansion suspensions, additional capital requirements, and required changes to board or committee composition.

For the External Auditor: Failures can result in formal regulatory communications documenting deficiencies, requirements to update methodology with compliance confirmation, regulatory assessments questioning competence for regulated entity engagements, and potential restrictions on eligibility to audit regulated entities. In Caribbean markets where regulated entity engagements represent significant audit revenue, regulatory concerns carry material commercial consequences.

For Individual Directors: Directors on non-functional audit committees may face mandatory governance training requirements, fitness and propriety assessments, and in extreme cases, requirements to resign. The personal consequences underscore the seriousness with which regulators view audit committee effectiveness.

Dawgen Global’s Regulatory Audit Readiness Programme

Dawgen Global has developed a Regulatory Audit Readiness Programme specifically for Caribbean regulated entities and their auditors, addressing the enhanced expectations Caribbean financial regulators now place on the audit function and audit committee governance.

Regulatory Expectation Gap Assessment: Dawgen Global evaluates current audit and governance arrangements against the specific expectations of the entity’s primary regulator, identifies gaps, prioritises areas requiring immediate attention, and produces a remediation roadmap aligned with the supervisory timeline.

Audit Committee Regulatory Compliance Review: Dawgen Global assesses the audit committee’s composition, practices, and reporting against applicable regulatory governance guidelines. For entities with regulatory findings, we support development and implementation of the required Board Action Plan.

Auditor Reporting Framework Design: Dawgen Global helps audit firms and regulated entities establish frameworks for auditor reporting to regulators, including identification of reportable matters, documentation of professional judgement, and communication protocols between auditor, audit committee, and regulator.

Mock Regulatory Examination: Dawgen Global conducts mock regulatory examinations simulating the scope, methodology, and intensity of actual supervisory examinations. The mock examination identifies likely findings, enabling remediation before the actual examination. This service, detailed in the governance series, is particularly effective in preparing audit committees and management for governance dimensions of examination.

Ongoing Regulatory Advisory: Dawgen Global monitors regulatory developments across Caribbean jurisdictions and advises regulated entities on changes to supervisory expectations affecting audit, governance, and compliance arrangements, ensuring entities remain current with evolving requirements.

The New Relationship

The fictional insurance company whose auditor failed to report material observations to the regulator was operating under an outdated understanding of the auditor’s role. The audit partner’s reflection captures a reality every Caribbean audit firm and regulated entity must internalise: the external auditor of a regulated entity is a participant in the supervisory framework, not merely a provider of financial statement assurance.

The audit committee of a regulated entity is a governance mechanism the regulator assesses, engages with, and holds accountable for financial reporting quality, internal controls, compliance, and risk governance. The committee that meets twice per year, lacks expertise, and has never engaged with the regulator is falling short of regulatory requirements with enforceable consequences.

Caribbean regulated entities and their auditors that understand and embrace this new relationship will find that the strengthened expectations, while demanding, create a governance ecosystem that is more robust, more transparent, and ultimately more protective of the stakeholders the regulatory framework is designed to serve.

Prepare for Regulatory Expectations

Dawgen Global invites Caribbean regulated entities, audit committees, and audit firms to assess their readiness for the enhanced regulatory expectations governing the audit function in the Caribbean financial services sector.

Request a proposal for Dawgen Global’s Regulatory Audit Readiness Programme. Email [email protected] or visit www.dawgen.global to begin the conversation.

DAWGEN GLOBAL | Big Firm Capabilities. Caribbean Understanding.

Request a proposal for Dawgen Global’s Regulatory Audit Readiness Programme.

Email: [email protected]

Web: www.dawgen.global

About Dawgen Global