NorwayFinanstilsynet
Audit firm fined 500,000 kroner over fraud-risk and revenue failures
Finanstilsynet fined ES Revisjon AS 500,000 kroner for gross breaches in four 2025 audits: deficient fraud-risk and revenue work plus years of weak cyclical inspections.
By Taxxa AI OyPublished 14 October 2026
Industry: Accounting, bookkeeping and auditing activities; tax consultancy
Finanstilsynet has fined the Harstad audit firm ES Revisjon AS 500 000 kronerFinanstilsynet after finding extensive breaches of the Auditors Act (revisorloven)
Finanstilsynet in the audits of four companies
Finanstilsynet. The inspection showed that the firm had not carried out the necessary audit procedures for fraud risk
Finanstilsynet and the audit of revenue
Finanstilsynet, had not exercised sufficient professional scepticism
Finanstilsynet, and had not obtained sufficient and appropriate audit evidence
Finanstilsynet. Over several years the firm had also failed to carry out satisfactory cyclical engagement inspections
Finanstilsynet.
The supervision started after DnR reported two engagement-responsible auditors at the firm in a letter dated 15 December 2025Finanstilsynet, concluding that there were deficiencies in audit performance that could give reasonable grounds to consider withdrawing their approval as auditors
Finanstilsynet. Finanstilsynet controlled selected areas of two 2026 audit engagements for each of the two auditors, for the 2025 financial year, and met the firm on 29 June 2026
Finanstilsynet. After an overall assessment Finanstilsynet concluded that the two auditors' approvals should not be withdrawn
Finanstilsynet, noting that Finanstilsynet's own review of the 2025 audits showed quality improvements since DnR's 2025 control. The breaches found were nevertheless so fundamental that a fine was warranted
Finanstilsynet.
The engagement findings follow the same pattern across all four clients. On fraud risk, the auditor's identification of fraud risks was deficientFinanstilsynet and the procedures designed to address them were unsatisfactory
Finanstilsynet, so sufficient and appropriate evidence was not obtained for several account balances
Finanstilsynet — a breach of section 9-4 third paragraph (c), (d) and (e)
Finanstilsynet. The auditor also failed to exercise sufficient professional scepticism as required by section 9-4 fourth paragraph
Finanstilsynet. Examples: in engagement A the close family relationship between the client's managing director — also board chair and significant shareholder — and the external accountant was never discussed by the team as ISA 240 requires
Finanstilsynet, and reliance on the director appearing honest was treated as audit evidence
Finanstilsynet; in the used-car business (engagement B) unusual sales, including one car bought after its recorded sale date
Finanstilsynet at a loss of around 66 per cent of cost
Finanstilsynet, were never verified against contracts or receipts
Finanstilsynet.
On revenue, the auditor identified a specific fraud risk of unrecorded salesFinanstilsynet but never obtained an understanding of the client's controls addressing that risk as ISA 315 requires
Finanstilsynet, and designed no procedures capable of proving completeness
Finanstilsynet. In engagement C the invoice journal showed significantly higher turnover than the accounts
Finanstilsynet, and a manual debit of roughly six times performance materiality
Finanstilsynet that reduced recorded revenue
Finanstilsynet was never checked
Finanstilsynet. The engagement and cyclical-control breaches are classified as gross
Finanstilsynet; the audit-report defect in engagement A
Finanstilsynet feeds into the overall assessment.
The fine is imposed under section 14-5 of the Auditors ActFinanstilsynet for breach of sections 7-1 fifth paragraph
Finanstilsynet and 9-4 third and fourth paragraphs
Finanstilsynet. A fine against an audit firm can reach 10 million kroner or 2 per cent of total annual turnover; ES Revisjon reported 2025 turnover of 27.7 million kroner
Finanstilsynet and profit of 6.6 million. Finanstilsynet weighed the grossness and multi-year duration of the breaches, the preventive effect, and the economic advantage of reduced time spent. The firm was notified of the planned decision on 17 September 2026
Finanstilsynet, has taken note of the preliminary report, and says it will take further quality-improvement measures. The firm may appeal within three weeks of receipt
Finanstilsynet; the Financial Supervision Appeals Board (Finanstilsynsklagenemnda) is the appellate body
Finanstilsynet. The tax collection authority collects the fine
Finanstilsynet, with payment due three weeks after the invoice is sent
Finanstilsynet.
Legal basis: revisorloven §§ 7-1 femte ledd, 9-4 tredje og fjerde ledd and 14-5Finanstilsynet.
Benchmark the findings against your own fraud-risk, revenue-audit and cyclical-inspection routines, and assess whether the firm needs remediation before the next inspection. The appeal deadline is three weeks from receipt of the decision.