How auditors test ECL

The ECL allowance is one of the most heavily audited numbers in a bank's accounts, and an area of frequent findings at ordinary companies too. Knowing what auditors will do makes preparation much easier. This guide explains the audit approach under ISA 540, what auditors test, what they ask for, and the common findings.

By Mirza Fahad Baig, Chartered Accountant. Reviewed by Hamza Fida, Chartered Accountant. 3 minute read.

Short answer

Here is how auditors test ECL. Under ISA 540 (Revised), auditors treat expected credit losses as an accounting estimate and scale their work to its estimation uncertainty, complexity and subjectivity. They understand how management makes the estimate, test controls over data and judgements, test the data and recalculate the model, and challenge the key judgements: economic forecasts and scenario weights, SICR criteria, and management overlays. For banks, ECL is almost always a key audit matter. For companies with trade receivables, testing the provision matrix and its forward-looking adjustment is usually central.

At a glance

Standard
ISA 540 (Revised)
Scaled to
Uncertainty, complexity, subjectivity
Tested
Controls, data, models, judgements
Main judgements
Forecasts, weights, SICR, overlays
Banks
Usually a key audit matter
Specialists
Credit modelling and economics
How auditors test ECLStandard: ISA 540 (Revised); Scaled to: Uncertainty, complexity, subjectivity; Tested: Controls, data, models, judgements; Main judgements: Forecasts, weights, SICR, overlays; Banks: Usually a key audit matter; Specialists: Credit modelling and economics.KEY FACTS AT A GLANCEHow auditors test ECLStandardISA 540 (Revised)Scaled toUncertainty, complexity,subjectivityTestedControls, data, models,judgementsMain judgementsForecasts, weights, SICR,overlaysBanksUsually a key auditmatterSpecialistsCredit modelling andeconomicsTax BakersHow auditors test ECLStandard: ISA 540 (Revised); Scaled to: Uncertainty, complexity, subjectivity; Tested: Controls, data, models, judgements; Main judgements: Forecasts, weights, SICR, overlays; Banks: Usually a key audit matter; Specialists: Credit modelling and economics.KEY FACTS AT A GLANCEHow auditors test ECLStandardISA 540 (Revised)Scaled toUncertainty, complexity, subjectivityTestedControls, data, models, judgementsMain judgementsForecasts, weights, SICR, overlaysBanksUsually a key audit matterSpecialistsCredit modelling and economicsTax Bakers
Key facts at a glance, as set out in this guide.

How do auditors test ECL?

How auditors approach ECLHow auditors approach ECL1UnderstandThe method,data and controls2Assess riskUncertainty andsubjectivity3Test controlsOver data andjudgements4Test theData, modelsand arithmetic5ChallengeForecasts, SICRand overlays
The work is scaled to how uncertain and judgemental the estimate is.
  1. Understand the business, the ECL methods, the data flows, the controls and the governance over judgements.
  2. Assess the risks of material misstatement, considering estimation uncertainty, complexity and subjectivity, and the risk of management bias.
  3. Test controls where relying on them: data reconciliations, model change controls, review and approval of forecasts and overlays.
  4. Test data and models: agree inputs to source systems, recalculate the model or parts of it, and test the staging logic.
  5. Challenge judgements: compare forecasts with external sources, test the SICR criteria, and examine each overlay's rationale and calculation.

Which ECL judgements do auditors challenge most?

  • Economic scenarios and weights: compared with consensus and central bank forecasts, and with the forecasts used for budgets and goodwill.
  • SICR thresholds: whether they move loans to stage 2 in time, often tested by looking back at loans that defaulted and checking whether they were in stage 2 beforehand.
  • Management overlays: the rationale, the calculation, double counting with the model, and release triggers.
  • Individually assessed stage 3 exposures: collateral values, recovery strategies and timing.
  • Model performance: back-testing results and outstanding validation findings.

How do auditors test SICR in practice?

A common test looks back at loans that defaulted during the year and checks which stage they were in six or twelve months earlier. If many defaulted straight from stage 1, the SICR criteria may be too slow. Auditors also recalculate staging for a sample of loans, test the data behind the PD comparisons, and check that qualitative triggers such as watchlist status flow through to stage 2.

How is ECL audited at smaller companies?

With a lighter but similar approach: agreeing the ageing report to the ledger, testing that invoices are aged correctly, recalculating the provision matrix, testing the loss rates against write-off history, considering the forward-looking adjustment, and reviewing receipts after the year end for evidence about recoverability.

What will auditors ask for?

The ECL methodology document; data reconciliations from the loan system to the model; model validation reports; the economic scenarios, weights and their approval; the overlay register with calculations; staging reports and transfer analysis; minutes of the impairment committee; and, for companies, the provision matrix with the write-off trace and forward-looking evidence.

Preparing these before the audit starts, with a short note explaining any changes since last year, usually shortens the fieldwork considerably and reduces the number of follow-up queries.

What is a key audit matter for ECL?

For listed companies, the auditor's report describes the matters of most significance in the audit. For banks, ECL is nearly always one of them, with a description of the specific risks, such as the judgement in economic scenarios or overlays, and how the audit addressed them. Reading peers' key audit matters is a useful way to see what auditors focus on.

What are common ECL audit findings?

  • A 0% loss rate on current receivables, or no forward-looking adjustment, in a provision matrix.
  • Overlays without documented calculations or clear release plans.
  • Data used in the model that does not reconcile to the ledger.
  • Intercompany loans and guarantees with no ECL assessment in parent company accounts.
  • Disclosures that do not match the numbers in the reconciliation.

How should companies prepare?

Document the method once and update it each year, reconcile the data before the audit starts, keep evidence for every judgement, and back-test last year's allowance. See ECL model validation, provision matrix mistakes and post-model adjustment governance.

Need help applying the standards?

Our Chartered Accountants help finance teams and students apply IFRS and US GAAP to real transactions.

Questions people ask

How do auditors test ECL?

Under ISA 540 they understand the method, assess risks, test controls, test the data and models, and challenge judgements such as forecasts, SICR criteria and overlays.

Which auditing standard covers ECL?

ISA 540 (Revised), Auditing Accounting Estimates and Related Disclosures.

Is ECL a key audit matter?

For banks almost always; for other companies when the allowance is significant and judgemental.

What do auditors ask for when testing ECL?

The methodology, data reconciliations, validation reports, scenarios and weights, the overlay register, staging reports, committee minutes, and the provision matrix workings.

Sources

Every fee, date and rule on this page was taken from these official and primary sources.

  1. IFRS Foundation: IFRS 9 Financial Instruments
  2. IAASB: ISA 540 (Revised), Auditing Accounting Estimates and Related Disclosures

Rules and fees change. If you are reading this long after October 4, 2026, confirm the figures with the source before you rely on them.

More in ECL

This guide is general information. It is not tax or legal advice for your situation.