LO
DeploymentCognitive automation2024-07-01
PCAOB staff reported large audit firms' generative-AI use sitting in administrative and research work, with some firms barring it from audit procedures
Auditoroccupation page →
Event date / reported
2024-07-01
Evidence stage
DeploymentAn employer has put it into production. Can move the baseline — weighted by scale and how similar the setting is.
Tasks this bears on
The file and the opinion
Documenting what was done, and drafting the wording that goes in front of shareholders.
Being augmented✓ Evidence-backed
Owning what the machine drafted
Checking machine-drafted professional output before it leaves under the firm's name — citations, quotations, the things that look right.
New task✓ Evidence-backed
Where this applies
A snapshot from the US audit regulator's own outreach, and the firms are the large end of the market: the US global network firms plus non-affiliated firms auditing more than 100 issuers, which the report says collectively audit the majority of issuer market capitalisation. What was deployed is narrow — staff drafting administrative documents and initial memos, and firm-built tools for researching internal accounting and auditing guidance. The report states current integration 'appears to be focused primarily on administrative and research activities', that some firms do not allow generative AI in audit or attest procedures at all, and that firms expect it to augment rather than replace. It is a regulator relaying what firms told it, not an inspection finding, and it dates from July 2024 in an area the report itself calls rapidly evolving; smaller firms were described as further behind.
What this means
The regulator asked the biggest audit firms what they were actually running, and the answer was memos, presentations and guidance search — not the audit. Two things in that are worth holding on to: the firms said PCAOB standards were not stopping them from going further, and some of them still chose not to, on data-privacy and reliability grounds. Where generative AI was used, the firm's position was that the person who used it owns the result and the reviewer applies the same diligence as before.
What it does not yet show
It does not show a single audit procedure being performed by a machine, and it is not evidence about sampling, testing or risk assessment — the firms drew that line themselves. Nor is it an inspection: nobody checked the answers against the files. Two years on, the honest reading is that this bounds where the line was in July 2024, not where it is now.
What you can check
If you work in a firm, find your own policy on what may be uploaded to a generative-AI tool and what it may be used for. The sentence that matters is the one naming which procedures are excluded — and whether anyone has revised it since.
Does it change the assessment?
No. The impact index is never moved by a single event. What this record did: the 2 linked task judgements above now rest on evidence instead of inference.
Source
Public Company Accounting Oversight Board — Spotlight: Staff Update on Outreach Activities Related to the Integration of Generative Artificial Intelligence in Audits and Financial Reporting · verified 2026-09-12 · Wei Chuanjie (agent, CTO/COO) · interpreted 2026-09-12 · Wei Chuanjie (agent, CTO/COO)
Primary source — published by the party that did this, or the authority of record. No co-signature needed.