Retirement plan advisors know that employee benefit plan auditors are part of the annual compliance calendar for plan sponsors whose plans require an audit, but the conversation gets more complicated when a single client sponsors both a 401(k) and an ESOP. The two audits share the same ERISA foundation, yet they diverge in ways that matter for the referral you make and the reputation that sits behind it.
This post is written for the advisor sitting between the plan sponsor and the audit firm, not for the sponsor and not for the ERISA attorney. Employee benefit plan audits look uniform from the outside, but the employee stock ownership plan audit side introduces complexity that general audit volume alone does not prepare a firm to handle.
| QUICK ANSWER: A 401(k) and an ESOP sponsored by the same employer each file their own Form 5500, and each plan that is subject to the audit requirement receives its own audit and audit report. Both audits cover the same core areas, including contributions, distributions, allocations and plan document compliance. The ESOP adds two areas a 401(k) audit does not have: testing of the employer stock valuation and, for a leveraged ESOP, the loan and related accounting. When recommending employee benefit plan auditors for a dual-plan client, ask about ESOP-specific experience in those two areas, not just total audit volume. |
What Do 401(k) and ESOP Audits Have in Common?
Both audits sit on the same ERISA foundation, and most of the core procedures are the same. Contributions, participant allocations, distributions, plan document testing and risk-based procedures apply to a 401(k) audit and an ESOP audit alike. The retirement plan audit overlap is real, and it is broad.
Shared audit fundamentals for both plan types include:
- Contribution testing (employer and, for 401(k) plans, employee)
- Participant allocation and eligibility testing
- Distribution and benefit payment testing
- Plan document and operational compliance review
- Financial statement presentation and required ERISA disclosures
In both cases the auditor uses risk-based testing rather than examining every transaction. Take those five areas off the table and what remains is where ESOP audits actually diverge, which is a much narrower conversation than most advisors expect.
Where Do ESOP Audits Diverge From 401(k) Audits?
Two audit areas make ESOP engagements meaningfully different from a defined contribution audit. The first is employer stock valuation, and the second, for leveraged ESOPs, is the loan and related accounting.
An ESOP audit and a 401(k) audit share the same ERISA foundation, but the employer stock valuation and, for leveraged ESOPs, the loan accounting introduce complexity that requires genuine ESOP-specific audit experience to handle correctly.
Why Do ESOP Audits Often Run Later in the Year?
Timing is the other practical difference. The ESOP’s reporting cannot be prepared until the stock valuation is finalized, and the valuation itself may depend on the company’s financial statements, so ESOP audits often take place later in the year than the 401(k) audit for the same sponsor. For background on how ESOPs are structured outside the audit context, the National Center for Employee Ownership publishes independent research.
Should the Same Firm Handle Both Audits?
In many cases, yes. Each plan files its own Form 5500 and receives its own audit and audit opinion, but a firm with genuine experience across both plan types can perform both engagements. The benefit of coordinating ESOP and 401(k) audits under one firm is practical: consistent staffing, one point of contact, and the opportunity to leverage work across both plans where appropriate, creating efficiencies for the sponsor.
The question is not whether one firm can do it. The question is whether the firm you are recommending has real ESOP depth or only general EBP audit volume.
| Consideration | 401(k) Audit | ESOP Audit |
|---|---|---|
| Contribution and allocation testing | Yes | Yes |
| Distribution testing | Yes | Yes |
| Plan document compliance | Yes | Yes |
| Employer stock valuation testing | Not typically | Yes (primary) |
| Leveraged loan accounting | No | Yes (if leveraged) |
| Company stock disclosures | Only if the plan holds employer stock | Yes |
| Main timing driver | Year-end payroll and recordkeeper data | Completion of the stock valuation and recordkeeping reports |
Many firms perform employee benefit plan audits at scale. Fewer have genuine, ESOP-specific experience with valuation testing and leveraged loans.
What Should Advisors Ask Employee Benefit Plan Auditors Before a Dual-Plan Referral?
This is where the search for an ERISA audit specialist for a dual-plan client gets practical. General EBP volume tells you a firm handles retirement plan audits at some scale, but it does not tell you what you actually need to know.
The dual-plan sponsor audit questions worth asking are:
- How many ESOP audits do you complete each year, separate from your total EBP audit count?
- How do you approach employer stock valuation testing, and what does that look like in practice?
- Have you handled leveraged ESOP loan accounting, and how many of your ESOP audits are leveraged?
- Will the same engagement team handle both the 401(k) and the ESOP audit for a dual-plan client?
- What is your timeline for issuing both audits, and how do you coordinate them for one sponsor?
- Is your firm a member of the AICPA Employee Benefit Plan Audit Quality Center, and can you share your most recent peer review report?
General answers to any of these questions are a useful signal in themselves. Specific, direct answers, with actual numbers, are what you are looking for. For a broader framework, see our guide on how to evaluate an audit firm before you refer a plan sponsor client.
What Does an EBP-Exclusive Audit Firm Look Like?
Firms that perform employee benefit plan audits exclusively look different from generalist CPA firms that treat EBP audits as one line of business among many. The staffing is consistent year to year, the process is standardized, and the plan-type experience is real rather than incidental.
Caron Bletzer is a national CPA firm that works exclusively on employee benefit plan audits, performing approximately 1,200 each year for plan sponsors across the United States. That work spans 401(k) plan audits, 403(b) and other defined contribution plan audits, ESOP, defined benefit and health and welfare plan audits, so ESOP and 401(k) engagements are handled by teams that see these plan types every day, not once or twice a year. The firm is a member of the AICPA Employee Benefit Plan Audit Quality Center and, like every CPA firm that performs these audits, is subject to peer review. For advisors managing 401(k) clients alongside more complex plan structures, our 401(k) audit checklist and timeline helps set expectations before the audit begins.
Picture a plan sponsor that maintains a 401(k) for all employees and adopted an ESOP when the founder sold part of the company to employees. The 401(k) audit can usually move ahead once year-end payroll and recordkeeper data are available, while the ESOP’s reporting has to wait until the appraiser finalizes the stock valuation. With both engagements at one firm, the sponsor can plan both audits from a single calendar. At Caron Bletzer, an ESOP engagement begins with a kickoff meeting with the plan sponsor and its service providers to align timelines and deadlines, so each party knows when its deliverables are expected.
Independence matters throughout. Caron Bletzer is independent of the plans it audits, the plan sponsor’s service providers and the advisors who recommend it. The audit firm evaluates, tests and reports. It does not oversee or manage the plan, and its audit work is not directed or influenced by the sponsor’s other service providers.
Key Takeaways
- ESOP and 401(k) audits share the same core areas: contributions, allocations, distributions, plan document compliance and financial statement disclosures, all tested with risk-based procedures.
- The ESOP-specific differences are employer stock valuation and, for leveraged ESOPs, the loan and related accounting.
- An independent appraiser performs the stock valuation. The auditor tests it and obtains sufficient appropriate audit evidence on whether the reported value is materially correct.
- Each plan files its own Form 5500 and receives its own audit and opinion, although one firm with genuine experience in both plan types can perform both engagements.
- ESOP reporting often finishes later than the 401(k) because the stock valuation must be finalized first.
- Before recommending employee benefit plan auditors for a dual-plan client, ask about ESOP-specific experience, leveraged loans, EBPAQC membership and peer review, not just total audit volume.
The Bottom Line: The Referral You Make Reflects on You
General employee benefit plan audit volume does not automatically mean deep ESOP audit experience. Advisors who recommend a firm for a dual-plan client should ask specifically about valuation testing and leveraged loan experience, not just overall plan audit numbers.
The employee benefit plan auditors you recommend become part of your client’s experience. When the referral goes well, it strengthens your professional relationship with the client. When it does not, you find out after the sponsor does.
If you work with plan sponsors who maintain both a 401(k) and an ESOP and want to understand how an EBP-exclusive firm approaches both audits, start a conversation with Caron Bletzer.
Reviewed by Kimberly Jarry, CPA, Partner. Kimberly has concentrated her practice on employee benefit plan audits for more than 13 years, including ESOPs, and is a licensed CPA in New Hampshire.
Questions Advisors Ask About Dual-Plan Audits
Do a 401(k) and an ESOP maintained by the same employer require separate audits?
Yes. Each plan files its own Form 5500, and each plan that is subject to the audit requirement needs its own independent audit. The same firm may perform both audits, but each engagement is separate and results in its own audit opinion.
What makes an ESOP audit different from a 401(k) audit?
The two primary differences are employer stock valuation and, for leveraged ESOPs, the loan and related accounting. Both require audit procedures that go beyond a standard defined contribution audit. The core fundamentals, including contributions, distributions, allocations and plan document testing, apply to both plan types.
Does the auditor perform the ESOP stock valuation?
No. An independent appraiser performs the valuation. The auditor tests it and obtains sufficient appropriate audit evidence to support an opinion on whether the reported value is materially correct. The auditor evaluates the valuation but does not produce it.
Can one firm audit both the 401(k) and the ESOP for the same plan sponsor?
In many cases, yes. A firm with genuine experience in both plan types can conduct both audits. The key question is whether the firm has specific ESOP audit experience, particularly with valuation testing and leveraged loan accounting, rather than only general employee benefit plan audit volume.
What should a financial advisor ask an audit firm before recommending them for a client with both a 401(k) and an ESOP?
Ask about ESOP audit experience specifically, not just overall EBP audit volume. Ask how the firm approaches employer stock valuation testing, whether it has handled leveraged ESOP loan accounting, and how many ESOP audits it completes each year. It is also reasonable to ask about AICPA EBPAQC membership and the firm’s most recent peer review.
What happens to the audit if the ESOP stock valuation is late?
The ESOP audit cannot be completed until the valuation is final, because the auditor needs it to perform testing and support the audit opinion. A delayed valuation typically delays the plan’s reporting and, in turn, the Form 5500 filing. That is why an organized timeline, set at the start of the engagement with the plan sponsor and its service providers, matters so much for ESOPs.
Does an ESOP or 401(k) audit test every transaction?
No. Both use risk-based testing procedures rather than examining every transaction. An audit provides independent assurance based on applicable auditing standards, and it is not a guarantee that every operational or compliance issue has been identified.