IPO Readiness: Auditors, Boards, and Listing Standards

Before a company can list, it needs audited financial statements from a PCAOB-registered firm, an audit committee that meets SEC Rule 10A-3, and a board structure that satisfies NYSE or Nasdaq governance standards ^{[1][4][5][6][8]}. Both exchanges require a majority-independent board, but IPO companies get phase-in periods of up to one year, and controlled companies can opt out of some requirements ^[6][7][8]. Internal-control reporting under Sarbanes-Oxley Section 404 is also phased in after the IPO ^[9][10].

What "ready" means

IPO readiness is the work a private company does so that, on the day it lists, it can produce public-company disclosure and operate under public-company governance. The starting point is the financial statements. The prospectus must include audited financial statements, with non-financial disclosure governed by Regulation S-K and financial statements governed by Regulation S-X ^[1]. An emerging growth company (EGC) may present audited financial statements for two fiscal years instead of the three required of other registrants ^[2], and the SEC's investor bulletin notes that smaller reporting companies may also present two years in an IPO prospectus ^[3].

In practice the readiness checklist has four parts: an audit that will satisfy the SEC, a board and committee structure that will satisfy the chosen exchange, controls and closing processes that can support quarterly reporting, and disclosure processes that can support the registration statement. Each has a long lead time, which is why readiness work usually starts well before any bank is hired.

The auditor: PCAOB registration

Under Section 102 of the Sarbanes-Oxley Act, it is unlawful for any person that is not a registered public accounting firm to prepare or issue, or to participate in preparing or issuing, an audit report with respect to any issuer ^[4]. A company whose private-company audits were performed by a firm that is not registered with the Public Company Accounting Oversight Board (PCAOB) therefore typically needs a registered firm to audit, or re-audit, the periods that will appear in the prospectus.

Once listed, the auditor answers to the audit committee. SEC Rule 10A-3 requires that the audit committee of a listed issuer be directly responsible for the appointment, compensation, retention, and oversight of the registered public accounting firm, and that the firm report directly to the committee ^[5]. The rule also requires the committee to establish procedures for handling complaints about accounting, internal accounting controls, or auditing matters, including the confidential, anonymous submission of concerns by employees ^[5].

Board independence

Both major exchanges require a majority-independent board. NYSE Section 303A.01 states that listed companies must have a majority of independent directors ^[7], and Nasdaq Rule 5605(b) likewise requires a board with a majority of independent directors ^[8]. Under NYSE Section 303A.02, no director qualifies as independent unless the board affirmatively determines that the director has no material relationship with the company, and the NYSE states that owning even a significant amount of stock is not, by itself, a bar to independence ^[7].

The NYSE also applies bright-line disqualifications. For example, a director is not independent if the director is, or within the last three years was, an employee of the company, or if the director received more than $120,000 in direct compensation from the company, other than director and committee fees and certain deferred compensation, in any twelve-month period within the last three years ^[7]. Non-management directors must meet in regularly scheduled executive sessions without management ^[7].

The three key committees

• Audit committee (Nasdaq): composed solely of independent directors who also satisfy SEC Rule 10A-3 and can read and understand fundamental financial statements, with at least three members, one of whom has financial sophistication ^[8].
• Audit committee independence (SEC): a member may not accept any consulting, advisory, or other compensatory fee from the issuer, other than for board or committee service, and may not be an affiliated person of the issuer or its subsidiaries ^[5].
• Compensation committee (Nasdaq): solely independent directors and at least two members, with an additional independence test under Rule 5605(d)(2)(A); the committee determines, or recommends to the board, executive officer pay ^[8].
• Compensation committee independence (NYSE): the board must consider factors such as the source of a director's compensation and any affiliation with the company ^[7].
• Nominations (Nasdaq): independent directors must select or recommend director nominees ^[8].

Phase-ins for IPO companies

Exchanges recognize that a company cannot reconstitute its board overnight. The Nasdaq Initial Listing Guide notes that exemptions and phase-ins apply to initial public offerings and controlled companies, among others ^[8]. The NYSE spells out its schedule in Section 303A.00: a company listing in connection with its IPO must satisfy the majority-independent-board requirement within one year of the listing date ^[6]. Its nominating and compensation committees must each have at least one independent member by the earlier of the IPO closing or five business days after listing, a majority of independent members within 90 days of listing, and fully independent membership within one year ^[6].

The audit committee runs on a parallel clock: at least one independent member satisfying Rule 10A-3 by the listing date, a majority within 90 days of the registration statement's effective date, and full independence within one year of effectiveness ^[6]. The NYSE's three-member minimum phases in as one member by listing, two within 90 days, and three within one year, and the internal audit function must be in place within one year of listing ^[6]. Rule 10A-3 itself permits the same pattern for IPO issuers: all but one member may be exempt from its independence requirements for 90 days after effectiveness, and a minority may be exempt for one year ^[5].

Controlled companies

Founder- or sponsor-controlled companies often use an exemption. Under NYSE Section 303A.00, a listed company in which more than 50% of the voting power for the election of directors is held by an individual, a group, or another company is not required to comply with the majority-independent-board, nominating committee, and compensation committee requirements, but must comply with the rest of Section 303A and make the disclosure required by Regulation S-K ^[6]. The audit committee requirements therefore still apply to a controlled company. Nasdaq's guide also lists controlled companies among those eligible for exemptions ^[8].

Internal controls: the Section 404 transition

Section 404(a) of the Sarbanes-Oxley Act requires each annual report to contain management's assessment of the effectiveness of the company's internal control over financial reporting, and Section 404(b) requires the auditor to attest to that assessment, except for emerging growth companies ^[10]. Section 404(c) exempts issuers that are neither large accelerated filers nor accelerated filers from the auditor attestation ^[10]. Newly public companies get a further transition: under Item 308 of Regulation S-K, a registrant need not include management's report or the auditor's attestation until it has filed, or was required to file, an annual report for the prior fiscal year ^[9]. The SEC's May 2026 fact sheet summarizes the current position: the auditor attestation applies to large accelerated filers, accelerated filers, and certain smaller reporting companies that are also accelerated filers, but not to non-accelerated filers or EGCs ^[11].

Key terms

PCAOB-registered firm

A public accounting firm registered with the Public Company Accounting Oversight Board; only such firms may prepare or issue audit reports for issuers.

Independent director

Under NYSE rules, a director the board affirmatively determines has no material relationship with the company and who is not caught by the bright-line tests.

Audit committee

A board committee of independent directors responsible for appointing, paying, retaining, and overseeing the outside auditor.

Rule 10A-3

SEC rule setting audit committee independence and responsibility standards that exchanges must apply to listed issuers.

Phase-in period

A transition period allowing a newly listed company to reach full board and committee independence, generally within one year under NYSE rules.

Controlled company

Under NYSE rules, a listed company in which more than 50% of the voting power for electing directors is held by one person, group, or company.

Executive session

A regularly scheduled meeting of non-management (or independent) directors without management present.

Internal control over financial reporting (ICFR)

The processes that provide reasonable assurance about the reliability of financial reporting; management assesses it under Section 404(a).

Check your understanding

Sources

1. [1]U.S. Securities and Exchange Commission, “What is a Registration Statement?,” November 12, 2024.
2. [2]U.S. Securities and Exchange Commission, “Emerging Growth Companies,” June 24, 2024.
3. [3]U.S. Securities and Exchange Commission, Office of Investor Education and Advocacy, “Investor Bulletin: Investing in an IPO (SEC Pub. No. 133),” February 2013.
4. [4]Legal Information Institute, Cornell Law School, “15 U.S.C. 7212 — Registration with the Board (Sarbanes-Oxley Act Section 102),” Accessed November 2026.
5. [5]Electronic Code of Federal Regulations (eCFR), “17 CFR 240.10A-3 — Listing standards relating to audit committees,” Accessed November 2026.
6. [6]New York Stock Exchange, “NYSE Listed Company Manual Section 303A.00 — Corporate Governance Standards: Introduction,” Accessed November 2026.
7. [7]New York Stock Exchange, “NYSE Listed Company Manual Sections 303A.01–303A.03 — Independent Directors, Independence Tests, Executive Sessions,” Accessed November 2026.
8. [8]Nasdaq, Inc., “Initial Listing Guide,” January 2026.
9. [9]Electronic Code of Federal Regulations (eCFR), “17 CFR 229.308 (Item 308 of Regulation S-K) — Internal control over financial reporting,” Accessed November 2026.
10. [10]Legal Information Institute, Cornell Law School, “15 U.S.C. 7262 — Management assessment of internal controls (Sarbanes-Oxley Act Section 404),” Accessed November 2026.
11. [11]U.S. Securities and Exchange Commission, “Fact Sheet: Enhancing the Public Company Reporting Framework,” May 19, 2026.

Educational content only — not legal, tax, or investment advice, or an offer to sell or a solicitation of an offer to buy any security. Rules and data are described as of November 2026 and may change. Securities offered through Umergence LLC, Member FINRA/SIPC.