How to Choose an Audit Firm in Malaysia: A Practical Guide for Sdn Bhd Companies

Reading time: ~12 minutes. Audience: Malaysian Sdn Bhd directors, CFOs, and finance managers who need to appoint an auditor or are considering switching firms. Skill level: beginner to intermediate.

Choosing an auditor is one of those decisions most Malaysian business owners make once and then forget about — until something goes wrong. An auditor who doesn’t understand your industry will ask irrelevant questions, blow past deadlines, and deliver a management letter full of boilerplate. A good auditor catches real problems, keeps you compliant, and finishes on time.

This guide helps you make that choice. We’ll cover who needs a statutory audit, what types of engagements exist, what auditors actually look for, how fees work, and how to tell a good firm from a mediocre one.

Part 1: Does your company need a statutory audit?

Under the Companies Act 2016, every Malaysian company must have its financial statements audited unless it qualifies for audit exemption.

Audit exemption criteria

A company qualifies as an exempt private company if it meets ALL of these:

1. Revenue does not exceed RM 100,000 in the financial year
2. It has no corporate shareholders (all shareholders are natural persons)
3. It has 20 or fewer shareholders
4. It is not a subsidiary of another company

If you qualify, you can file a compilation report instead of audited financial statements. This is cheaper and faster, but provides no assurance to third parties.

When you need an audit even if exempt

Even exempt companies sometimes need an audit because:

• Banks require it for loan applications above a certain threshold
• Government contracts often require audited financial statements
• Investors and acquirers will insist on audited numbers during due diligence
• You want credibility — an auditor’s report carries weight with suppliers, partners, and regulators

Our recommendation: If your revenue is above RM 500,000 or you have any external stakeholders (lenders, investors, major suppliers), get the audit. The cost is modest compared to the credibility it provides.

Part 2: Types of audit engagements

Engagement	What it is	When to use it
Statutory audit	Full audit of financial statements under ISA standards, resulting in an independent auditor’s report filed with SSM	Required by law for non-exempt companies
Compilation report	Accountant compiles financial statements from management data without expressing an opinion (ISRS 4410)	For exempt private companies that want to save on audit fees
Agreed-upon procedures (AUP)	Auditor performs specific procedures and reports factual findings — no opinion	Due diligence, grant compliance, specific account verification
Internal audit	Review of internal controls, risk management, and operational efficiency	For companies that want ongoing assurance between annual audits
Review engagement	Limited assurance — less than an audit but more than a compilation (ISRE 2400)	Rarely used in Malaysia for Sdn Bhd companies

Most Malaysian SMEs need either a statutory audit or a compilation report. The audit gives you the full independent opinion; the compilation just presents your numbers without checking them.

Part 3: What auditors actually look for

During the audit fieldwork, the audit team focuses on areas where the risk of material misstatement is highest. For a typical Malaysian SME, these are:

Revenue recognition

• Are sales recorded in the correct period (cut-off)?
• Are credit notes and returns handled properly?
• For construction or project-based businesses: is percentage-of-completion calculated correctly?

Trade receivables

• Is the aged receivables schedule accurate?
• Are doubtful debts identified and provided for?
• Has the company impaired long-outstanding balances?

Trade payables and accruals

• Are all supplier bills recorded at year-end?
• Are accruals for EPF, SOCSO, EIS, utilities, and professional fees complete?
• Are there any unrecorded liabilities?

Bank and cash

• Do bank reconciliations agree to the bank statements and GL?
• Are there unexplained reconciling items?
• Is petty cash properly controlled and documented?

Fixed assets

• Are additions supported by purchase documentation?
• Is depreciation calculated correctly under the company’s accounting policy?
• Have disposals been properly removed from the register?

Tax

• Is the current tax provision reasonable?
• Are deferred tax balances calculated correctly?
• Is the SST position consistent with the filed SST-02 returns?

Statutory compliance

• Are the financial statements in the correct format (MFRS or MPERS)?
• Are all Companies Act 2016 disclosures present (directors’ report, statement of compliance)?
• Is the audit report correctly dated and signed?

Part 4: How audit fees work in Malaysia

Audit fees in Malaysia are typically quoted as a fixed fee for the engagement, not hourly billing. The fee depends on:

• Revenue and total assets — larger companies have more transactions to test
• Number of entities — group audits cost more because each subsidiary needs separate testing
• Complexity — multi-currency, intercompany transactions, and unusual transactions increase the work
• Industry — construction, property development, and financial services require specialized audit procedures
• Location — KL-based firms charge a premium over regional firms

Fee benchmarks (2026)

Company profile	Typical audit fee
Single-entity Sdn Bhd, revenue under RM 1M	RM 3,000–6,000
Single-entity, revenue RM 1M–5M	RM 5,000–12,000
Single-entity, revenue RM 5M–20M	RM 10,000–25,000
Group with 2–5 entities	RM 15,000–40,000
Compilation report (exempt company)	RM 1,500–3,000

These are the total engagement fee — there should be no surprises on top. If a firm quotes hourly and cannot give you a ceiling, that’s a red flag.

Part 5: How to evaluate an audit firm

Must-haves

1. AOB registration: The firm must be registered with the Audit Oversight Board of Malaysia — check the AOB register
2. Industry experience: Ask for references from clients in your sector
3. Engagement partner: Know who will sign your audit report — not just the junior who does the fieldwork
4. Timeline commitment: The firm should commit to a specific fieldwork start date and signing deadline
5. Fixed fee: No open-ended hourly billing — agree on the total fee before work begins

Nice-to-haves

• Cloud-native approach: Firms that can work directly from your accounting software (like IntBooks) are faster and cheaper because they don’t need you to print and scan documents
• Tax team: A firm with an in-house tax department can flag tax issues during the audit and save you a separate engagement
• Proactive management letter: The management letter should contain real, actionable recommendations — not just “we noted the following”
• Bilingual: Ability to present findings to the board in English and Bahasa Malaysia

Red flags

• “We’ll tell you the fee after the audit”: This means they’ll bill whatever they want
• No partner involvement: If the engagement partner never attends meetings or reviews the work, you’re paying premium fees for junior staff
• Missed deadlines year after year: If the firm can’t sign within 60 days of your year-end (for an SME), they’re overcommitted
• Boilerplate management letter: If the management letter is copy-pasted from a template and doesn’t mention your specific business, the audit was superficial

Part 6: How IntBooks simplifies audit preparation

Traditional audit preparation involves weeks of assembling a “PBC list” (prepared by client) — trial balance, bank reconciliations, aged schedules, transaction samples, fixed asset register, and dozens of supporting documents. With IntBooks, your auditor gets read-only access to your live ledger.

What this means in practice:

• No PBC list: The auditor pulls everything directly from IntBooks — trial balance, bank recs, aged AR/AP, transaction samples, and journal entries
• Real-time data: The auditor works on the same data you see, not a stale snapshot from 3 months ago
• Faster fieldwork: Clients using IntBooks‘s integrated audit service report 40–60% reduction in fieldwork time
• Secure access: The auditor gets read-only access scoped to their engagement period — no downloads, no USB drives, no email attachments
• Audit trail: Every transaction in IntBooks has a full audit trail (who created it, when, approvals) that the auditor can inspect without asking you

The result: cheaper audits, fewer queries, faster signing, and a management letter that actually reflects what happened in your business.

---

Next steps: Explore audit services · Statutory audit glossary entry · View all professional services