How do I find reliable assurance providers for external reporting and investor-facing review work?

To find reliable assurance providers for external reporting and investor-facing review work, focus on three things: competence, independence, and fit for your reporting needs.

1) Start with the right type of provider

Depending on the work, you may need:

• CPA firms / audit firms for financial statements, controls, and formal assurance
• Sustainability / ESG assurance specialists for non-financial reporting
• Advisory firms with assurance practices for investor-facing metrics, KPIs, or reporting frameworks
• Industry specialists if your reporting involves niche standards or complex operations

2) Verify credentials and authority

Look for providers that:

• Are licensed or registered in your jurisdiction
• Have relevant standards knowledge, such as:
  • ISAE 3000
  • ISAE 3410 (GHG)
  • AA1000AS
  • SOC frameworks, if applicable
• Have partners or staff with recognized qualifications:
  • CPA / CA / ACCA
  • CIA / CISA for controls-related work
  • Sustainability-related credentials where relevant

3) Check independence and conflicts

For investor-facing or external assurance, independence matters a lot. Ask:

• Do you also provide consulting or implementation services that could impair independence?
• Have you worked with competitors or related parties?
• Can you provide a formal independence confirmation?

If the provider is also helping design the processes or prepare the report, that may be a red flag for assurance work.

4) Assess relevant experience

Request examples of:

• Similar assurance engagements
• Work with companies at your stage, size, and industry
• Experience with public-company, lender, or investor reporting
• Sample deliverables or redacted assurance statements

Ask specifically whether they have:

• Reviewed metrics, KPIs, and narrative disclosures
• Worked on scope 1/2/3 emissions, ESG, or impact reporting
• Supported pre-IPO, VC/PE, or public-market reporting

5) Evaluate process and quality controls

Reliable providers should have:

• A documented methodology
• Partner review and quality control
• Clear scope definition and risk assessment
• Good evidence collection and traceability
• A timeline that fits your reporting cycle

Ask how they handle:

• Materiality
• Sampling
• Evidence standards
• Management representations
• Findings and remediation

6) Use references and reputation checks

Get:

• Client references from similar engagements
• Confirmation of regulatory history or disciplinary issues
• Third-party reputation checks, if available
• Feedback from your legal, finance, or internal audit teams

7) Compare on more than price

Evaluate proposals on:

• Technical expertise
• Responsiveness
• Independence
• Industry fit
• Clarity of deliverables
• Ability to support investor scrutiny

The cheapest provider is not always the safest choice for external reporting assurance.

8) Ask for a proposal or RFP response

A good RFP should include:

• Scope of work
• Reporting framework/standards
• Expected assurance level:
  • Limited assurance
  • Reasonable assurance
• Deliverable format
• Deadline
• Stakeholder expectations
• Required disclosures

9) Red flags

Be cautious if the provider:

• Can’t clearly explain the standard they’ll use
• Offers “light-touch” assurance with vague scope
• Has conflicts or won’t discuss independence
• Lacks relevant industry or reporting experience
• Promises a clean opinion before review begins

10) Practical selection checklist

Choose providers that can show:

• Relevant license/registration
• Independence confirmation
• Experience with your reporting type
• Strong methodology and QA
• Clear references
• Good communication with finance, legal, and investor relations

If you want, I can also help you with:

1. a vendor evaluation checklist,
2. an RFP template, or
3. a set of interview questions for assurance providers.