Performing Employee Benefit Plan Audit Procedures for Participant Data, Contributions, Investments, and Distributions

How auditors test employee benefit plan participant data, contributions, distributions, loans, investments, certifications, and ERISA compliance risks.

Employee benefit plan audit procedures are built from the plan document, payroll records, participant data, recordkeeper reports, custodian or trustee information, and ERISA reporting requirements. The auditor is not auditing the plan sponsor as a whole; the auditor is auditing the plan’s financial statements and required plan information.

The central AUD move is to connect each procedure to the plan provision being tested. Eligibility, compensation, deferral elections, employer match, vesting, loans, benefit payments, and investment allocations all depend on the written plan terms.

    flowchart TD
	    A["Read plan document and amendments"] --> B["Map key provisions"]
	    B --> C["Test participant census and eligibility"]
	    B --> D["Test contributions and allocations"]
	    B --> E["Test distributions, loans, and benefit payments"]
	    B --> F["Test investments and certified information"]
	    C --> G["Evaluate financial statement and disclosure effects"]
	    D --> G
	    E --> G
	    F --> G
	    G --> H["Report findings and supplemental schedule matters when required"]

Procedure Map

Audit area Key question Common evidence
Participant data Are eligible participants, compensation, service, and status accurate and complete? HR files, payroll registers, census reports, recordkeeper data, and plan document provisions.
Contributions Were employee deferrals and employer contributions calculated, deposited, and allocated properly? Payroll reports, deferral elections, trust statements, contribution reports, and match calculations.
Distributions and loans Were payments authorized, eligible, and calculated under plan terms? Distribution forms, vesting records, loan agreements, repayment schedules, tax forms, and approvals.
Investments Do plan assets exist, belong to the plan, and have appropriate values and disclosures? Custodian statements, trustee confirmations, certified investment information, pricing data, and valuation reports.
Compliance-sensitive items Are prohibited transactions, late deferrals, party-in-interest transactions, or reportable findings present? Transaction listings, related-party records, delinquent contribution schedules, Form 5500, and governance minutes.

The plan document is the starting point. If the auditor tests a contribution calculation without knowing eligible compensation, match formula, entry dates, and vesting provisions, the test is incomplete.

Participant Data

Participant data drives contributions, allocations, vesting, loans, distributions, and defined benefit obligations. Errors in census data can flow through the entire plan.

Data element Why it matters
Date of birth Affects benefit eligibility, actuarial calculations, and required distributions.
Hire date and termination date Affects eligibility, vesting, and service credit.
Eligible compensation Affects employee deferrals, employer match, profit-sharing, and benefit formulas.
Hours or service credit Affects eligibility and vesting.
Deferral election Affects employee contribution amount.
Employment status Affects active, terminated, retired, or beneficiary classification.

Common procedures include reconciling the participant census to payroll and HR records, testing new entrants and terminations, recalculating service and vesting, and comparing recordkeeper data to sponsor records.

Contributions and Allocations

Contribution testing asks whether money was withheld, deposited, and allocated in accordance with the plan document and ERISA requirements.

Contribution type Auditor procedure
Employee deferrals Recalculate selected deferrals using eligible compensation and elected percentages.
Timely remittance Compare payroll dates to trust deposit dates and identify late deposits.
Employer match Recalculate the match using the plan formula and eligible compensation.
Profit-sharing contribution Test allocation method, eligible participants, and board or sponsor authorization when relevant.
Rollovers Inspect rollover documentation and trace amounts to participant accounts.

Employee deferrals should be remitted as soon as they can reasonably be segregated from the sponsor’s general assets. Late deposits can create prohibited transactions and may require lost earnings to be restored.

Distributions and Participant Loans

Distributions and loans are tested against eligibility, vesting, authorization, calculation, and payment records.

Payment type Audit focus
Termination distribution Participant status, vested balance, election form, approval, tax withholding, and payment amount.
Hardship withdrawal Plan permission, participant eligibility, supporting documentation, and amount permitted.
Required minimum distribution Age or beneficiary status, account balance, calculation, and timing.
Participant loan Plan permission, participant authorization, statutory and plan limits, repayment terms, and default status.
Defined benefit payment Benefit formula, service and compensation data, annuity election, actuarial factors, and payment records.

The auditor should not assume that a payment is valid because it cleared the custodian. The payment must be allowed by the plan and supported by participant records.

Investments and Certifications

Investment procedures depend on whether management elected an ERISA Section 103(a)(3)(C) audit and whether investment information was properly certified by a qualified institution.

Situation Auditor focus
No Section 103(a)(3)(C) election Test existence, valuation, ownership, income, purchases, sales, and disclosures for plan investments.
Proper Section 103(a)(3)(C) election Evaluate the certification and perform required procedures on certified investment information while auditing noncertified information.
Hard-to-value investments Consider valuation methods, assumptions, external evidence, and whether a specialist is needed.
Employer securities Evaluate valuation, transactions, allocations, and related-party disclosure risks.
Participant-directed accounts Reconcile recordkeeper allocation data to custodian or trustee information.

Current terminology matters. Do not describe the Section 103(a)(3)(C) election as a simple limited-scope disclaimer. It changes the audit approach to qualifying certified investment information but does not eliminate the audit of the plan.

Compliance and Reportable Findings

EBP audit procedures often identify issues that affect reporting, disclosure, supplemental schedules, or communications with governance.

Issue Why it matters
Late employee deferrals May be a prohibited transaction and may require lost earnings and schedule disclosure.
Incorrect eligible compensation Can misstate deferrals, match, profit-sharing, and benefit calculations.
Operational failure to follow plan document May affect tax qualification, participant balances, and disclosures.
Party-in-interest transaction May require disclosure and evaluation under ERISA rules.
Missing or incomplete participant census Can affect completeness of accounts or obligations.
Uncorrected prior finding May indicate control problems and repeated compliance failure.

The auditor evaluates whether the issue creates a material misstatement, requires schedule disclosure, creates a reportable finding, or affects the audit report.

Exam Traps

  • EBP procedures start with the plan document, not with generic retirement plan rules.
  • Accurate custodian statements do not prove participant eligibility, vesting, compensation, or contribution calculations.
  • Employee deferrals are sensitive because late remittance can create prohibited transactions.
  • Section 103(a)(3)(C) certification affects qualifying investment information, not contributions, distributions, participant data, or expenses.
  • Participant loans must be tested against plan terms and legal limits; they are not ordinary receivables from the sponsor.
  • Hard-to-value investments may require more evidence than a sponsor-provided schedule.
  • The auditor reports and communicates findings based on materiality, pervasiveness, and ERISA reporting requirements.

Quick Review

Use this sequence for EBP procedure questions:

  1. Read the plan document and amendments.
  2. Identify the plan type and key provisions.
  3. Reconcile participant data to payroll, HR, and recordkeeper records.
  4. Test employee deferrals, employer contributions, and allocations.
  5. Test distributions, loans, benefit payments, and vesting.
  6. Determine whether investments are audited directly or covered by a proper Section 103(a)(3)(C) certification.
  7. Evaluate compliance findings, supplemental schedule effects, and required communications.

Review Questions

### Which procedure is central to validating participant data? - [x] Comparing HR records, payroll data, participant census information, and plan provisions. - [ ] Inspecting the sponsor's advertising invoices. - [ ] Reading only the prior-year audit report. - [ ] Testing unrelated corporate receivables. > **Explanation:** Participant data testing reconciles source records and plan terms to the census and recordkeeper data used in the plan. ### What is a primary concern when auditing employee deferrals in a 401(k) plan? - [ ] Whether the sponsor recorded sales revenue properly. - [x] Whether deferrals were calculated correctly and remitted to the plan timely. - [ ] Whether board members were paid on time. - [ ] Whether the plan used IFRS. > **Explanation:** Employee deferrals must be calculated from eligible compensation and deposited promptly. ### What is the best starting point for testing employer match calculations? - [ ] A generic retirement article. - [ ] The sponsor's advertising budget. - [x] The plan document's match formula and eligible compensation definition. - [ ] The auditor's billing records. > **Explanation:** The plan document defines the match formula and eligible compensation. ### What remains subject to audit when a proper ERISA Section 103(a)(3)(C) election is made? - [ ] Nothing, because the election cancels the audit. - [x] Noncertified information such as contributions, distributions, participant data, and expenses. - [ ] Only the plan sponsor's corporate inventory. - [ ] Only the custodian's marketing materials. > **Explanation:** The election affects qualifying certified investment information, not the entire plan audit. ### Which issue is most likely a prohibited transaction concern? - [ ] Timely depositing employee deferrals. - [x] Using plan assets for the sponsor's operating needs. - [ ] Recalculating participant vesting. - [ ] Disclosing investment valuation policies. > **Explanation:** Plan assets must be used for plan participants and beneficiaries, not sponsor operations. ### Why does the auditor test participant loans? - [ ] To audit the sponsor's bank debt. - [x] To determine whether loans were authorized, within plan and legal limits, and repaid under required terms. - [ ] To eliminate the need for contribution testing. - [ ] To issue an opinion on participant credit scores. > **Explanation:** Participant loans must comply with plan provisions and applicable limits and repayment terms. ### Which evidence is most relevant when testing a termination distribution? - [ ] The sponsor's sales forecast. - [x] Participant status, vested balance, distribution election, approval, and payment record. - [ ] The auditor's staff schedule. - [ ] The plan's logo file. > **Explanation:** Termination distributions require evidence of eligibility, authorization, vesting, calculation, and payment. ### What should the auditor consider for hard-to-value plan investments? - [ ] Excluding the investments from the financial statements. - [x] Valuation methods, assumptions, external evidence, and whether a specialist is needed. - [ ] Assuming fair value equals cost in every case. - [ ] Treating the investment as a payroll deferral. > **Explanation:** Hard-to-value investments often require additional valuation evidence and may require specialist involvement. ### What can happen when eligible compensation is defined incorrectly in testing? - [ ] Only the plan's website is misstated. - [x] Deferrals, matches, profit-sharing allocations, or benefit calculations may be misstated. - [ ] The auditor automatically issues an adverse opinion on the sponsor. - [ ] Nothing, because compensation never affects participant accounts. > **Explanation:** Eligible compensation is a key input to many EBP calculations. ### What should an auditor do when EBP testing identifies a possible compliance finding? - [ ] Ignore it if management says it will be fixed next year. - [x] Evaluate financial statement, disclosure, supplemental schedule, communication, and reporting effects. - [ ] Convert the audit into a tax return. - [ ] Remove the finding from documentation. > **Explanation:** EBP findings may affect the financial statements, supplemental schedules, governance communications, and audit reporting.
Revised on Monday, June 15, 2026