An ESOP audit succeeds or fails on coordination. The employer, the plan administrator, the independent trustee, the valuation firm, and the financial statement auditor each hold a piece of the file, and an ESOP audit only closes cleanly when those pieces reconcile to the same share value, the same participant counts, and the same Form 5500 figures. With ESOP adoption rising and regulators sharpening their focus on stock valuation through 2025 and 2026, plan sponsors who treat the audit as a sequence of handoffs invite delays, qualified opinions, and reporting penalties.
This article gives plan sponsors and committees a working coordination checklist: when an audit is required, how the appraisal gets reviewed, what valuation testing the auditor actually performs, and where documentation gaps most often surface. Each section is built around the same idea, that the people holding the records should agree on the numbers before fieldwork starts, not during it.
Quick answer: An ESOP that covers 100 or more participants with account balances at the start of the plan year is a “large plan” and must attach audited financial statements to its Form 5500, generally due July 31 for calendar-year plans (extendable to October 15 with Form 5558). Because employer stock held by an ESOP is usually not certified by a qualified institution, that stock typically falls outside any ERISA Section 103(a)(3)(C) election, so the independent appraisal and the trustee’s good-faith valuation process become central audit areas. Coordination means aligning the appraisal date, trustee review, participant records, and Form 5500 disclosures before fieldwork begins.
When Is an ESOP Audit Required?
The audit trigger is the participant count, not the dollar value of the plan. Under the Form 5500 rules effective for plan years beginning on or after January 1, 2023, participants are counted as those with an account balance at the beginning of the plan year, and a plan reaching 100 such participants is classified as large and must file with an attached independent auditor’s report. The U.S. Department of Labor publishes the governing forms and instructions through its Form 5500 series resources.
The “80-120” rule softens the edge of that threshold. A plan that filed as small in the prior year does not need an audit until it exceeds 120 participants, and a plan already filing as large may continue filing on the same basis until its count drops below 100. Sponsors near the line should run the count early, because a late determination that an audit is required compresses the schedule against a fixed filing date.
Deadlines drive everything else. The Form 5500 is due the last day of the seventh month after plan year-end, July 31 for a calendar-year plan, with a 2.5 month extension to October 15 available by filing Form 5558 with the IRS by the original due date, as the IRS Form 5500 Corner confirms. Late filings expose the plan to civil penalties under ERISA, so the audit timeline should be built backward from the filing date.
A practical consequence follows from this counting method. Because the relevant figure is the participant count at the beginning of the plan year, a growing company can cross the large-plan line well before management expects an audit obligation, and the determination should be revisited each year rather than assumed from the prior filing. Confirming the count and the filing basis early gives the sponsor, the trustee, and the auditor a shared starting point for the rest of the engagement.
Why Does Employer Stock Drive the ESOP Audit?
In a typical 401(k) plan with marketable securities held at a bank or insurer, the plan administrator can elect an ERISA Section 103(a)(3)(C) audit, under which the auditor does not substantively test investment values certified by that qualified institution. SAS 136, effective for plan years ending on or after December 15, 2021, renamed these from “limited scope” audits and clarified the preconditions. A qualified institution is a bank, similar institution, or regulated insurance carrier; investment companies and broker-dealers do not qualify.
Employer stock in an ESOP rarely meets that certification standard, and that is the crux of an ESOP audit. The closely held shares that make up most of the plan’s assets cannot be certified by a qualifying institution the way a custodian certifies publicly traded funds, so their value usually falls outside any 103(a)(3)(C) election. The auditor must obtain sufficient evidence over the fair value of the employer securities, which means the independent appraisal and the trustee’s reliance on it come under direct examination.
That examination is timely. In January 2025, the Department of Labor proposed a regulation defining “adequate consideration” and a related prohibited transaction exemption, both mandated by the SECURE 2.0 Act, before the proposals were withdrawn under a regulatory freeze. Even withdrawn, the proposal signaled regulator expectations: a trustee should prudently select a qualified, independent valuation advisor, scrutinize the projections behind the appraisal, and document a good-faith determination of fair market value.
The takeaway for sponsors is that the valuation is not a peripheral exhibit, it is the largest audited number in the plan and the one regulators watch most closely. Sponsors evaluating an ESOP transaction or a refinance should treat valuation diligence as a core part of transaction advisory work, not a year-end afterthought.
How Do the Appraisal Review and Valuation Testing Get Coordinated?
The appraisal review is where the trustee and the auditor have overlapping but distinct jobs, and confusing the two creates rework. The trustee’s job is to engage a qualified independent appraiser, challenge the assumptions, and conclude that the price the ESOP paid or carries reflects fair market value. The auditor’s job is to assess whether the appraiser is qualified and objective, whether the methods are appropriate, and whether the recorded value is supportable as audit evidence. The auditor relies on the appraiser as a management’s specialist but does not outsource the conclusion.
A clean coordination checklist for the appraisal covers the following:
- Engagement and independence. Confirm the appraiser is independent of the seller and sponsor and document how the trustee selected and evaluated that firm.
- Valuation date alignment. The appraisal date must match the plan’s measurement date so the Form 5500 financial statements, the participant allocations, and the audited stock value all tie to the same number.
- Assumption scrutiny. Retain the trustee’s review of the projections, discount rate, marketability and minority discounts, and any control premium, with written rationale rather than a signature alone.
- Reconciliation. Tie the appraised per-share value to the share count and to total plan equity, and reconcile distributions, repurchases, and contributions to the trust statements.
Valuation testing by the auditor then evaluates the appraiser’s competence and objectivity, tests the data the appraiser used for completeness and accuracy, and assesses the reasonableness of methods and significant assumptions. Where assumptions look aggressive, and regulators have specifically flagged inflated revenue or margin projections, the auditor will probe support and may consult its own valuation specialists. Providing the auditor with the full appraisal report, the data sent to the appraiser, and the trustee’s review memo up front shortens this phase materially.
The sequencing matters as much as the substance. When the appraisal is finalized before fieldwork and shares the same valuation date as the financial statements, the auditor tests a settled number rather than chasing a moving one, and the trustee’s documented review becomes evidence the auditor can rely on. Sponsors weighing the right scope and provider should review what is involved in audit and assurance services before fieldwork is scheduled.
How Do You Close the Documentation Gaps?
Most ESOP audit friction is documentation, not disagreement. The recurring gaps are predictable, which means they are preventable with a coordinated request list issued well before fieldwork. The goal is that every figure on the Form 5500, every participant statement, and every audit workpaper traces to the same source records.
The highest-frequency gaps include:
- Participant data that does not foot. Allocation reports, vesting schedules, and forfeitures should reconcile to the trust and to the prior-year audited balances.
- Repurchase obligation and distributions. Diversification elections, distribution timing, and repurchase activity should be documented and consistent with plan terms.
- Internal loan and leveraging records. For a leveraged ESOP, the inside loan amortization, release of shares from the suspense account, and related interest must be supported and tied to the appraisal.
- Trustee documentation. Minutes, the trustee’s valuation review, and evidence of the good-faith fair market value determination should exist in writing and date to the relevant period.
- Plan document consistency. Operations should match the current plan document and any amendments, including the participant counting method used to determine large-plan status.
Each of these gaps shares a root cause: records that live in separate systems, held by separate parties, that were never reconciled to one another. A single coordinated request list, owned by the sponsor and agreed with the trustee, appraiser, and auditor, forces those systems to tie out before the auditor arrives rather than after.
Coordination is the through-line across all of it. When the sponsor, trustee, appraiser, and auditor agree at the start on the valuation date, the participant count basis, the request list, and the filing deadline, the ESOP audit becomes a confirmation exercise rather than an investigation. That alignment is what protects the opinion and the Form 5500.
Frequently Asked Questions
Does every ESOP need an annual audit?
No. An ESOP must attach audited financial statements to its Form 5500 only when it is a large plan, generally meaning 100 or more participants with account balances at the beginning of the plan year, subject to the 80-120 rule near that threshold. Smaller ESOPs file without an audit unless another requirement applies.
Can an ESOP use an ERISA Section 103(a)(3)(C) audit to skip valuing the stock?
Generally no for the employer securities themselves. The 103(a)(3)(C) election only covers investment information certified by a qualified institution such as a bank or insurer, and closely held employer stock is typically not certified that way, so the appraisal and recorded stock value remain within the audit scope.
Who is responsible for the ESOP stock valuation, the trustee or the auditor?
The trustee is responsible for engaging an independent appraiser and making a good-faith determination that the price reflects fair market value. The auditor independently evaluates that the appraiser is qualified and objective and that the recorded value is supported by sufficient evidence; it does not set the value.
When is the Form 5500 due and can it be extended?
For a calendar-year plan the Form 5500 is due July 31. Filing Form 5558 with the IRS by that date extends the deadline 2.5 months to October 15. Because the audit report attaches to the filing, the audit schedule should be built backward from whichever date applies.
