How BSP Accreditation Affects Your Audit Requirements

Executive Summary

BSP accreditation plays an important role in the audit requirements of financial institutions in the Philippines. If your business is supervised by the Bangko Sentral ng Pilipinas, your audit is not simply a routine financial reporting exercise. It is part of your regulatory compliance obligations.

For BSP-supervised financial institutions, the choice of external auditor matters. You generally cannot appoint just any certified public accountant or audit firm. The auditor must be included in the BSP List of Selected External Auditors and must be qualified to audit your specific category of institution.

This requirement affects banks, quasi-banks, trust entities, non-stock savings and loan associations, pawnshops, remittance and transfer companies, money changers, foreign exchange dealers, virtual asset service providers, credit card issuers, and other financial institutions under BSP supervision.

In simple terms, BSP accreditation helps ensure that financial institutions are audited by professionals who understand banking, financial supervision, internal controls, regulatory reporting, and the standards expected by the BSP.

For business owners and compliance officers, this means one thing: your audit planning should begin before the year ends. Choosing the wrong auditor, delaying the appointment, or failing to meet BSP audit requirements can lead to compliance issues, regulatory findings, and possible sanctions.

What Is BSP Accreditation for External Auditors?

BSP accreditation refers to the inclusion of an external auditor in the BSP List of Selected External Auditors. This list identifies auditors and audit firms that may be engaged by BSP-supervised financial institutions for audit purposes.

The BSP does this because financial institutions handle public funds, client assets, payments, remittances, deposits, credit transactions, and other sensitive financial activities. Their financial statements must be reviewed by auditors who are competent, independent, and familiar with the regulatory environment.

A regular external audit may focus mainly on whether the financial statements are fairly presented. A BSP-related audit goes further because the audit may also affect regulatory confidence, governance assessment, and the institution’s relationship with the BSP.

This is why BSP accreditation is not just a formality. It directly affects who you may appoint, what audit standards apply, how your audited financial statements are reviewed, and how your institution demonstrates compliance.

Why BSP Accreditation Matters to Your Business

If your company is a BSP-supervised financial institution, your audit report carries regulatory weight. It may be used by the BSP to assess your financial condition, governance practices, risk management, and compliance culture.

An accredited external auditor is expected to understand the special risks of financial institutions. These may include liquidity risks, credit risks, operational risks, anti-money laundering controls, consumer protection obligations, cybersecurity risks, trust operations, and reporting requirements.

For businesses such as pawnshops, remittance companies, money changers, virtual asset service providers, and other money service businesses, this is especially important. These sectors are closely monitored because they involve financial transactions that may affect consumers, the payment system, and anti-money laundering compliance.

When your auditor is properly accredited, your audit is more likely to meet BSP expectations. When your auditor is not qualified or not included in the proper category, your institution may face regulatory concerns even if the audit itself was completed.

Who Is Affected by BSP Audit Requirements?

BSP audit requirements generally apply to BSP-supervised financial institutions. These include banks and non-bank financial institutions that fall under BSP regulation.

Examples include universal and commercial banks, thrift banks, rural banks, cooperative banks, digital banks, quasi-banks, trust entities, pawnshops, non-stock savings and loan associations, remittance and transfer companies, money changers, foreign exchange dealers, virtual asset service providers, and certain credit card issuers or acquirers.

The exact requirements may vary depending on the type, size, license, and regulatory category of the institution. This is why it is important to verify your classification before appointing an auditor.

A small pawnshop will not have the same audit profile as a universal bank. A remittance company will not have the same risk profile as a trust corporation. However, all BSP-supervised entities must take audit compliance seriously because the BSP expects the audit process to support financial transparency and sound governance.

How BSP Accreditation Affects Your Choice of Auditor

The most direct effect of BSP accreditation is that it limits your choice of external auditor.

A BSP-supervised financial institution must engage an external auditor included in the BSP List of Selected External Auditors. The auditor must also belong to the proper category for the institution being audited.

The BSP classifies auditors based on their qualifications, experience, track record, and continuing eligibility. Higher-category auditors may generally audit more complex institutions, while lower-category auditors may be limited to less complex institutions.

This classification system matters because appointing an auditor who is not qualified for your type of institution can create compliance issues. Even if the auditor is licensed as a CPA or accredited by another body, that does not automatically mean the auditor is acceptable for BSP audit purposes.

Before signing an engagement letter, your institution should confirm that the auditor is included in the BSP list, check the validity period of the auditor’s inclusion, and verify that the auditor’s category matches your institution’s category.

How BSP Accreditation Changes Your Audit Planning

BSP accreditation affects audit planning because the audit must be approached as a regulatory requirement, not just an accounting deadline.

Your company should start by confirming whether it is covered by BSP audit rules. Once confirmed, management should identify the appropriate auditor category and shortlist only qualified external auditors.

The board of directors, trustees, partners, or authorized officers should also be involved early. In many financial institutions, audit matters are connected to governance responsibilities. The appointment of an auditor should be properly documented and aligned with internal approval procedures.

The audit timeline should also be planned carefully. BSP-supervised institutions often need more time to prepare schedules, reconcile regulatory reports, review internal controls, and address audit findings.

A rushed audit increases the risk of incomplete documentation, delayed submission, and unresolved compliance issues. It may also make it harder for the auditor to properly assess areas that are important to the BSP, such as internal controls, related-party transactions, financial reporting accuracy, and regulatory compliance.

Step-by-Step Guide: How to Comply with BSP Audit Requirements

Step 1: Confirm Whether Your Entity Is BSP-Supervised

Start by determining whether your business is regulated by the BSP. This depends on your license, registration, and actual business activities.

If your company operates as a bank, pawnshop, remittance company, money changer, foreign exchange dealer, virtual asset service provider, or another regulated financial institution, you should assume that BSP audit requirements may apply.

Step 2: Identify Your Correct Regulatory Category

Once you confirm BSP supervision, determine your institution’s proper category. This is important because BSP-selected external auditors are also categorized.

The auditor you appoint must be allowed to audit your type of institution. Choosing the wrong category may result in audit and regulatory complications.

Step 3: Check the BSP List of Selected External Auditors

Before engaging an auditor, check whether the auditor or audit firm is included in the BSP List of Selected External Auditors.

You should also review the validity period of the auditor’s inclusion. An auditor may have been included in the past but may no longer be valid for the current audit period.

Step 4: Review Independence and Conflict-of-Interest Issues

The auditor must be independent. This means the auditor should not have relationships, financial interests, or prior employment connections that may affect objectivity.

Independence is especially important for BSP-supervised financial institutions because the audit report may influence regulatory assessment and public confidence.

Step 5: Prepare Audit Documents Early

Prepare your financial statements, ledgers, bank reconciliations, regulatory reports, board approvals, tax filings, contracts, loan documents, compliance reports, and supporting schedules.

For financial institutions, the auditor may also need documents related to internal controls, anti-money laundering compliance, consumer protection, risk management, and governance.

Step 6: Address Audit Findings Before Submission

Do not wait until the final audit report is issued before acting on findings. If the auditor identifies weaknesses in documentation, controls, accounting treatment, or regulatory compliance, management should address them promptly.

Corrective action shows that the institution takes compliance seriously. It also helps reduce the risk of repeated findings in future examinations.

Step 7: Keep Records and Working Documents Organized

BSP-related audits require strong recordkeeping. Your institution should maintain organized files of audit reports, management letters, board approvals, correspondence, and supporting documents.

Good recordkeeping helps during future audits, BSP examinations, internal reviews, and compliance assessments.

Common Audit Areas That BSP-Supervised Institutions Should Review

BSP-supervised institutions should expect auditors to pay close attention to financial reporting, internal controls, governance, and regulatory compliance.

For banks and quasi-banks, this may include loan classification, allowance for credit losses, liquidity, capital adequacy, related-party transactions, and trust operations.

For pawnshops, money service businesses, and remittance companies, this may include cash handling, transaction records, customer identification processes, anti-money laundering controls, branch operations, and reconciliation procedures.

For virtual asset service providers, audit concerns may include custody controls, cybersecurity, transaction monitoring, client asset protection, and compliance with applicable BSP rules.

Each institution should review its risk areas before the audit begins. The goal is not only to complete the audit, but to demonstrate that the institution is financially sound, properly governed, and compliant with regulatory expectations.

Risks and Penalties for Non-Compliance

Failure to follow BSP audit requirements can create serious consequences.

One common risk is the rejection or questioning of the audit engagement if the appointed auditor is not properly included in the BSP list or is not qualified for the institution’s category.

Another risk is regulatory criticism. If the BSP finds that the institution failed to comply with audit rules, the matter may be raised during supervisory review or examination.

The BSP may also require corrective action. This can include appointing a qualified auditor, submitting additional reports, improving internal controls, or addressing governance weaknesses.

In more serious cases, non-compliance may expose the institution, its directors, trustees, officers, or responsible persons to sanctions. These may depend on the nature of the violation, the institution involved, and the applicable BSP regulations.

There is also a reputational risk. Financial institutions rely heavily on trust. Audit issues can affect the confidence of regulators, investors, partners, customers, and counterparties.

For this reason, audit compliance should not be treated as a last-minute filing requirement. It should be part of the institution’s annual compliance calendar.

Practical Examples

Example 1: A Pawnshop Appoints a Regular CPA Who Is Not on the BSP List

A pawnshop hires a CPA to audit its financial statements. The CPA is licensed and experienced in general accounting, but is not included in the BSP List of Selected External Auditors.

This creates a compliance issue because the pawnshop is a BSP-supervised institution. The audit may not satisfy BSP requirements, and the institution may need to appoint a qualified auditor.

The lesson is simple: CPA license alone is not enough. BSP-supervised entities must verify BSP inclusion before engagement.

Example 2: A Remittance Company Waits Too Long to Appoint an Auditor

A remittance company delays its audit planning until close to the filing deadline. By that time, qualified BSP-selected auditors are already fully booked.

The company struggles to complete its audit on time. Documents are rushed, reconciliations are incomplete, and management has limited time to respond to audit findings.

The better approach is to appoint a qualified auditor early and prepare audit documents before year-end.

Example 3: A Financial Institution Chooses an Auditor from the Wrong Category

A financial institution appoints an auditor included in the BSP list but later discovers that the auditor’s category does not match the institution’s classification.

This may result in regulatory concerns. The institution may need to reassess the engagement and verify whether the auditor is allowed to handle the audit.

The key takeaway is that institutions must check both BSP inclusion and category qualification.

Frequently Asked Questions

What is BSP accreditation for auditors?

BSP accreditation refers to the inclusion of an external auditor in the BSP List of Selected External Auditors. This means the auditor has been recognized as eligible to audit certain BSP-supervised financial institutions, subject to the auditor’s category and validity period.

Does every company need a BSP-accredited auditor?

No. BSP accreditation is generally relevant to BSP-supervised financial institutions.

Ordinary companies that are not regulated by the BSP usually follow regular audit requirements under tax, corporate, or industry rules.

Can a regular CPA audit a BSP-supervised financial institution?

Not always. A CPA must be properly included in the BSP List of Selected External Auditors and must be qualified for the type or category of institution being audited.

What happens if we appoint an auditor who is not BSP-accredited?

Your institution may face compliance issues. The BSP may question the audit engagement, require corrective action, or impose appropriate supervisory measures depending on the circumstances.

How often should we check the BSP list?

You should check the BSP list before every audit engagement. An auditor’s inclusion may have a validity period, and the auditor’s status or category may change.

Is BSP accreditation the same as SEC or BOA accreditation?

No. These are different regulatory concepts. An auditor may have professional or regulatory accreditation from another body, but BSP-supervised institutions must still check whether the auditor is included in the BSP List of Selected External Auditors.

Why does the BSP care about external auditors?

The BSP relies on external auditors as part of the broader framework for financial stability, transparency, governance, and public confidence. Audited financial statements help regulators, investors, and the public understand the financial condition of supervised institutions.

Call-to-Action

BSP audit compliance requires more than preparing financial statements. Your institution must appoint the right auditor, follow the correct regulatory process, prepare complete documentation, and address audit findings before they become compliance problems.

If your company is a bank, pawnshop, remittance company, money changer, foreign exchange dealer, virtual asset service provider, or another BSP-supervised financial institution, it is best to review your audit requirements early.

Aureada Law can assist with BSP compliance, audit-related documentation, regulatory advisory, corporate governance review, and coordination with qualified professionals.