A new era in accounting enforcement

On August 5, 2026, the Securities and Exchange Commission (SEC)announcedthe establishment of the Financial Reporting and Accounting Unit (FRAU), a specialized unit within the Division of Enforcement designed to provide dedicated expertise, focus and capacity to “pursue accounting and financial reporting fraud cases as well as general misconduct in the accounting and auditing areas.”¹ The FRAU represents a structural investment in the SEC’s enforcement capabilities that may reshape the division of labor between the SEC and the Public Company Accounting Oversight Board (PCAOB)—a signal to public companies, auditors, audit committees and accounting firms alike to reassess where their primary enforcement exposure now lies.

Background and context

The FRAU reflects a broader philosophical commitment from SEC leadership to refocus disclosure requirements on materiality and accuracy. In March 2026, Chairman Paul Atkins announced a first-principles review of disclosure requirements “with materiality as its north star,” emphasizing that many existing requirements had “steadily become instruments to obscure, to insulate and to sustain a highly specialized cottage industry of advisors and consultants.”² In May 2026, Enforcement Director David Woodcock reinforced that priority, stating that the Division is “prioritizing financial reporting matters that are important to ensure good corporate accounting and disclosures.” ³

The FRAU also arrives at a moment of notable contraction in SEC accounting enforcement. Accounting and audit-related enforcement actions reportedly dropped 68 percent in 2025 compared to the prior year, and total agency settlements in fiscal year 2025—US$808 million—reportedly represent the lowest figure since 2012.⁴ Against that backdrop, Enforcement Director Woodcock described the FRAU as expanding the Division’s efforts against “bad actors in the accounting and auditing profession” and emphasized that it “will be critical in our efforts to pursu[e] financial reporting fraud, as well as accounting and auditor misconduct more generally.”⁵

Expansive mandate: Reaching auditors and issuers alike

The FRAU’s mandate is broad. Enforcement Director Woodcock described it as encompassing not only accounting and financial reporting fraud—but also “general misconduct in the accounting and auditing area.”⁶ In practical terms, anyone involved in the preparation, review, approval or certification of financial statements—auditors, accountants, CFOs, controllers, chief accounting officers, audit committee members, general counsel and outside audit firm personnel—may fall within the unit’s investigative reach. Significant to auditing firms, the FRAU creates a permanent SEC capability directed squarely at auditor conduct, not just issuer fraud.

The unit will be staffed by attorneys and accountants with specialized expertise in financial reporting and auditing and will be led by Timothy Zimmerman, a former practicing attorney who most recently served as Deputy General Counsel at an international accounting and professional services firm. Zimmerman previously worked alongside Enforcement Director Woodcock previously in private practice, and his recruitment reflects a deliberate effort to bring in leaders with fluency in both the legal and auditing landscapes. This leadership profile signals that the FRAU will operate with an insider perspective on how auditors and accounting professionals operate, allowing it to better handle investigations involving accounting judgments, internal controls, audit procedures and complex financial transactions.

The PCAOB’s shrinking enforcement footprint

An equally consequential implication from the establishment of the FRAU is what it signals about the future of PCAOB enforcement. The SEC and PCAOB have long maintained concurrent jurisdiction over registered public accounting firms, and the SEC’s Enforcement Manual acknowledges that “it may be preferable for one organization to be principally responsible for investigating an auditor’s conduct.”⁷ That allocation has generally tilted toward the PCAOB for audit-quality matters, but a standalone SEC enforcement unit dedicated to accounting and auditing fraud may change that balance.

Last year, Congress attempted to eliminate the PCAOB entirely and fold its authority into the Commission.⁸ That effort failed, but the FRAU may accomplish through administrative action what legislation could not: a practical migration of case-bringing authority from the PCAOB to the SEC, with the PCAOB’s role narrowing toward standard-setting and inspections. Such a reallocation would have meaningful implications for auditing firms.

The SEC possesses legal tools the PCAOB does not—most notably, subpoena authority and the ability to enforce subpoenas in federal court. Those capabilities give the SEC a distinct advantage in complex investigations, particularly the ability to seek documents and testimony from entities and individuals beyond the reach of the PCAOB, and make it a fundamentally different enforcement counterparty than the PCAOB. Auditors and accounting firms should expect the possibility of the SEC, not just the PCAOB, to be the primary enforcement venue for auditor and issuer accounting misconduct going forward.

Navigating FRAU enforcement: Practical recommendations

In May 2026, Enforcement Director Woodcock emphasized that the SEC “recognizes the difference between error and fraud” and that “remedies will be calibrated accordingly.”⁹ But he made clear that a “company that self-reports, cooperates fully and remediates will not be treated the same as one that conceals or obstructs.”¹⁰ Given the SEC’s increased focus and capabilities to pursue accounting and financial reporting matters, public companies and auditing firms should consider the following:

• Assess internal and disclosure controls proactively. Evaluate whether internal controls over financial reporting are properly designed, consistently applied and well-documented. Review disclosure processes and whistleblower channels to confirm they function as intended. Likewise, evaluate that material information flows effectively through the organization to those responsible for SEC filings and that processes are in place to identify and escalate potential disclosure issues before they become regulatory problems.
• Assess auditing practices and controls. Firms should assess their practices and controls in anticipation of heightened scrutiny of auditor independence, professional skepticism, audit documentation, quality control and compliance with PCAOB standards.
• Examine audit committee processes. Ensure that disagreements with outside auditors are documented and resolved, that whistleblower complaints involving accounting matters receive independent review and that the committee has direct access to the information it needs to fulfill its oversight responsibilities.
• Anticipate SEC enforcement as a primary regulatory. Auditing firms and public companies should evaluate compliance frameworks, engagement quality controls and response protocols with an eye toward SEC enforcement expectations—including the possibility of court enforceable subpoenas—not just PCAOB inspection standards.
• Engage experienced counsel early. Involve securities counsel when material accounting or disclosure issues arise—before positions are finalized or disclosed. Early engagement helps assess regulatory risk, evaluate voluntary disclosure obligations, preserve privilege and structure remedial steps in a way that reduces enforcement exposure. The FRAU is a permanent addition to the Division of Enforcement. Companies and auditing firms that identify potential issues early, engage experienced counsel, and structure a cooperative response will be best positioned to manage enforcement risk in this new landscape. 

Norton Rose Fulbright’s Regulatory Investigations, Securities Enforcement and Compliance team has deep experience advising public companies, audit committees, auditors and executives on SEC investigations, financial reporting matters and compliance.