The senior statutory auditor is the individual an audit firm names as responsible for a particular company audit. Section 503(3) of the Companies Act 2006 requires that person to sign the audit report in their own name, for and on behalf of the firm, so that a named, qualified individual stands behind every opinion. In the UK auditing standards the role is the same as the engagement partner: the person who directs the audit, reviews the work and decides that the report can be issued.

What exactly is a senior statutory auditor?

Most company audits are carried out by firms rather than individuals. Section 504(1) of the Companies Act 2006 defines the senior statutory auditor as the individual identified by the firm as senior statutory auditor for the audit in question, in accordance with guidance issued by the Secretary of State or a body the Secretary of State appoints. The Financial Reporting Council has been appointed to issue that guidance, and it does so in the application material to ISA (UK) 700, paragraphs A64-1 onwards.

Paragraph A64-5 says that, subject to the eligibility rule in the Act, senior statutory auditor has the same meaning as engagement partner in the ISAs (UK). ISA (UK) 220 defines the engagement partner as the partner or other individual, appointed by the firm, who is responsible for the audit engagement and its performance and for the auditor’s report issued on behalf of the firm. It is the person actually running the audit, not a ceremonial signatory.

How firms register is covered in our page on registered auditors.

Why do they sign in their own name rather than the firm’s?

Section 503(1) requires every auditor’s report to state the name of the auditor and to be signed and dated. Where the auditor is an individual, they sign it themselves (section 503(2)). Where the auditor is a firm, section 503(3) requires the report to be signed by the senior statutory auditor in their own name, for and on behalf of the firm. If more than one firm or person is appointed as joint auditors, section 503(4) requires all of them to sign.

The purpose is personal accountability: readers can see which individual took responsibility for the opinion. ISA (UK) 700 paragraph A64-11 adds that another partner or responsible individual cannot sign on the senior statutory auditor’s behalf.

Signing in a personal name does not, by itself, increase personal legal exposure. Section 504(3) says the senior statutory auditor is not subject to any civil liability that they would not otherwise have simply because they are named or because they signed the report. Liability to the company sits with the firm, subject to any liability limitation agreement. Criminal liability is separate: under section 507, an eligible member, employee or agent of the firm commits an offence by knowingly or recklessly causing the report to include anything misleading, false or deceptive in a material particular, or to omit certain statements required by section 498.

Who is allowed to be the senior statutory auditor?

Section 504(2) requires the person identified as senior statutory auditor to be eligible for appointment as auditor of the company. ISA (UK) 700 paragraph A64-4 notes that eligibility is dealt with in sections 1212 to 1225 of the Act. Beyond that, paragraph A64-3 says there are no further legal requirements: choosing which eligible individual takes the role is an internal matter for the firm.

In practice the registering bodies narrow the field. The Audit Regulations issued jointly by ICAEW, ICAS and Chartered Accountants Ireland state that the senior statutory auditor must be a responsible individual. Under regulation 4.01 a firm may designate as a responsible individual a principal or employee who:

  • holds an appropriate qualification;
  • is competent to conduct audit work;
  • is a fit and proper person;
  • is allowed to sign audit reports in their own name on behalf of the firm; and
  • can show that they meet the institute’s continuing professional development requirements.

Regulation 4.03 excludes consultants and subcontractors, and regulation 4.04 says only responsible individuals can be responsible for an audit and sign an audit report.

What does the role involve during the audit?

Because the senior statutory auditor is the engagement partner, the detailed duties come from ISA (UK) 220 (Revised July 2021). The main requirements are:

  • Overall responsibility for quality. Paragraph 13 requires the engagement partner to take overall responsibility for managing and achieving quality on the audit, and to be sufficiently and appropriately involved throughout so they have a basis for judging whether the significant judgments and conclusions are appropriate. UK paragraph 29-1 adds that the engagement partner bears overall responsibility for compliance with all the ISAs (UK) relevant to the audit and for ensuring the report issued is appropriate.
  • Ethics and independence. Paragraph 21 requires them, before dating the report, to take responsibility for determining whether ethical requirements, including independence, have been fulfilled. See our page on the FRC Ethical Standard.
  • Direction, supervision and review. Paragraph 29 makes them responsible for directing and supervising the team and reviewing its work. Paragraph 31 requires them to review audit documentation on significant issues and significant judgments at appropriate points during the audit.
  • Sign off. Paragraph 32 requires them to determine, on or before the report date, that sufficient appropriate evidence has been obtained, and paragraph 33 requires them to review the financial statements and the report itself before it is dated. Paragraph 40 requires a final check that they have taken overall responsibility for quality.

These duties sit inside the firm’s system of quality management under ISQM (UK) 1. The wider audit sequence is set out in how a statutory audit works.

Where does their name appear, and can it ever be left out?

Regulation 3.16 of the Audit Regulations requires an audit report on a UK entity to state the firm’s name as it appears in the register, followed by the words “Statutory Auditor”, and, where the law requires it, the name and signature of the responsible individual in charge, followed by “Senior Statutory Auditor”. The guidance to that regulation explains that the personal signature is required for the annual accounts of entities within section 1210 of the Act and for voluntarily revised accounts, but not for every report a company auditor gives, such as a report under section 714 on a redemption of shares out of capital.

A typical signature block reads along these lines. Illustration only.

A. Smith (Senior Statutory Auditor), for and on behalf of Example Audit LLP, Statutory Auditor, Bristol, 30 June 2026.

Section 505 requires every copy of the report published by the company to state the name of the auditor and of the person who signed as senior statutory auditor. Section 444(7) applies the same rule to the copy filed at Companies House. Publishing without the required statement is an offence by the company and every officer in default, with a fine up to level 3 on the standard scale (section 505(3) and (4)). ISA (UK) 700 paragraph A64-9 notes that the filed copy itself need not be signed personally by the senior statutory auditor, provided it states their name.

Section 506 allows the names to be omitted only where the company reasonably considers that stating them would create a serious risk of violence or intimidation, resolves accordingly and notifies the Secretary of State.

What happens if the senior statutory auditor changes or is unavailable?

If the firm changes the senior statutory auditor during an engagement, paragraph A64-10 says the new person reviews the work done up to the change so they are satisfied it was planned and performed properly. If the original person cannot continue to direct, supervise and review the work, paragraph A64-12 says the firm appoints a replacement. If they are simply away but still running the audit, paragraph A64-13 allows them to sign electronically. For entities with fixed reporting deadlines, paragraph A64-14 suggests a contingency plan, such as a second partner working in parallel who can take over if needed.

How long can one person act as senior statutory auditor for a company?

Rotation rules come from the FRC’s Revised Ethical Standard 2024, effective from 15 December 2024. For public interest entities and other listed entities, paragraph 3.10 says nobody may act as engagement partner for more than five years, followed by a five year cooling off period. Paragraph 3.14 allows the audit committee and firm to agree up to two further years, so no more than seven in total, where that safeguards audit quality, and paragraph 3.15 requires that extension and its reasons to be disclosed to shareholders.

For other entities there is no fixed limit, but paragraph 3.5 requires careful consideration of independence once an engagement partner has served ten continuous years; if they are not rotated, safeguards are applied, the reasoning is documented and the facts are communicated to those charged with governance.

What do people commonly get wrong?

  • Treating the signature as administrative. The person who signs must be the person who directed and reviewed the audit. A partner signing a file they have not run is a breach of ISA (UK) 220, not a formality.
  • Omitting the name from the filed accounts. Section 444(7) requires it unless the section 506 procedure has been followed.
  • Losing track of rotation. Years as engagement partner count across firms for listed and public interest entities, so a partner who moves firm with a client does not restart the clock.

For what the report itself says, see our page on types of audit opinion.

Solar Protect provides tax investigation insurance for businesses and fee protection schemes for accountancy practices. Read how our cover works or get a quote.

Related Accountapedia entries

Sources

Reviewed by Christine Anderson, Broker, Solar Protect. Last reviewed 19 October 2026. Part of Accountapedia, the Solar Protect guide to UK tax and accounting. This page is general information, not personalised advice.