Tilsynsrapport og vedtak - Stiansen & Co AS

The regulator found pervasive weaknesses in audit execution, including inadequate audit evidence, insufficient professional scepticism, and poor follow-up of indicators of unlawful activity at audited entities. It also concluded that the firm's cyclical engagement quality control and actions taken after earlier inspections had not operated as intended. Although the decision is firm-specific, it signals heightened supervisory scrutiny of audit quality and remediation credibility in Norway.

Compliance teams should treat this as a governance and third-party risk issue, not only an audit-firm matter. Audit committees and boards should confirm that their auditors have robust quality management, documented evidence standards, and clear escalation procedures for fraud or legal breaches. Firms with Norwegian operations or subsidiaries should review auditor monitoring, challenge remediation plans, and consider whether additional assurance is needed where audit quality concerns arise.

Audit firms should test the effectiveness of engagement quality reviews, professional scepticism training, and follow-up of prior inspection findings. RegCanary view: the penalty reinforces that supervisory expectations extend beyond technical compliance to demonstrable audit quality and responsive remediation. Action items: reassess auditor oversight and quality indicators; require evidence of completed remediation; strengthen audit committee scrutiny; and document escalation and follow-up of law-violation indicators.