USES AND IMPACT OF AUDIT IN MANAGING MEDIUM SCALE COMPANIES IN NIGERIA

CHAPTER ONE: INTRODUCTION

1.1 Background of Study

Medium-scale enterprises occupy a critical and distinctive position in the Nigerian economy, serving as the engine of employment generation, innovation, and economic diversification between the microenterprises of the informal sector and the large multinational corporations and conglomerates. Unlike small-scale enterprises that often lack formal management structures and large-scale enterprises with sophisticated internal control systems, medium-scale companies face unique challenges: they have outgrown the informal management practices of small businesses but have not yet developed the elaborate internal control systems, governance structures, and professional management typical of large corporations. In this transitional phase, the role of audit—both internal and external—becomes particularly significant. Audits provide independent assurance about the reliability of financial information, the effectiveness of internal controls, and the compliance with legal and regulatory requirements, all of which are essential for the sustainable growth and survival of medium-scale companies (Ogunleye, 2015; Adeyemi, 2012; Nweze, 2016).

The concept of audit, in its broadest sense, refers to the systematic and independent examination of books, accounts, documents, and vouchers of an organisation to ascertain how far the financial statements present a true and fair view of the state of affairs of the organisation. For medium-scale companies in Nigeria, the audit function serves multiple purposes that extend beyond the statutory requirement for external audit. Internally, audits provide management with assurance that the company’s assets are safeguarded, that financial information is reliable, that operations are conducted efficiently, and that employees are complying with company policies and procedures. Externally, audits provide assurance to stakeholders—including owners (who may not be involved in day-to-day management), creditors (banks and suppliers), tax authorities, and regulators—that the financial statements are free from material misstatement. The uses of audit information are thus diverse, and the impact of audit on the management of medium-scale companies can be substantial (Arens, Elder, and Beasley, 2017; Hayes, Dassen, Schilder, and Wallage, 2005; Okafor, 2015).

The Nigerian business environment presents particular challenges for medium-scale companies that make the audit function especially valuable. These challenges include: limited access to formal credit (banks often require audited financial statements as a condition for lending), high levels of economic uncertainty (currency volatility, inflation, policy inconsistency), weak infrastructure (unreliable electricity, poor roads), intense competition from imports and from informal sector operators, and high transaction costs. In this environment, medium-scale companies need robust financial management and control systems to survive and grow. Audits help identify weaknesses in these systems, provide recommendations for improvement, and enhance the credibility of financial information for external stakeholders. The uses of audit in managing medium-scale companies thus extend from operational improvements (through management letters and internal audit recommendations) to strategic advantages (through enhanced access to credit and improved stakeholder confidence) (Odia and Ogiedu, 2013; Umoren and Enang, 2015; Adeyemi and Uadiale, 2011).

The statutory framework for audit in Nigeria is established by the Companies and Allied Matters Act (CAMA), which requires that every company, including medium-scale companies, appoint auditors who are chartered accountants (members of the Institute of Chartered Accountants of Nigeria, ICAN, or recognised equivalent). The auditors are required to report to the shareholders on whether the financial statements present a true and fair view of the company’s financial position and performance, and whether the company has kept proper accounting records. For medium-scale companies, this statutory audit provides an independent check on management’s stewardship, reducing the risk of fraud, error, and mismanagement. However, the statutory audit is only one aspect of the audit function; many medium-scale companies also benefit from internal audit functions (either staff internal auditors or outsourced internal audit services) and from the recommendations provided by external auditors in management letters (Federal Republic of Nigeria, 1990; Okafor, 2015; Okike, 2007).

The distinction between internal audit and external audit is important for understanding the uses and impact of audit in medium-scale companies. External audit is performed by independent chartered accountants engaged by the company (but appointed by shareholders) and is primarily focused on expressing an opinion on the financial statements. The external audit is required by law for registered companies and is intended to protect shareholders and other stakeholders from material misstatements. Internal audit, on the other hand, is performed by employees of the company (or outsourced to external firms) and is focused on evaluating and improving the effectiveness of risk management, internal control, and governance processes. Internal audit is not required by law but is a management tool that can significantly improve the company’s operations. Many medium-scale companies in Nigeria do not have formal internal audit functions, relying instead on external audit recommendations to identify control weaknesses (IIA, 2017; Pickett, 2018; Sawyer, Dittenhofer, and Scheiner, 2017).

The management letter (also known as the letter of weakness or management representation letter) is one of the most practical and valuable outputs of the external audit for medium-scale companies. In the management letter, auditors communicate to management and those charged with governance (the board of directors or audit committee) any significant deficiencies in internal control, other observations that could improve operations, and recommendations for improvement. These recommendations are often practical, actionable, and based on the auditor’s knowledge of best practices across multiple companies. For medium-scale companies that may lack sophisticated internal audit functions, the management letter can serve as a roadmap for improving internal controls, reducing risks, and enhancing operational efficiency. The impact of the management letter depends on management’s responsiveness; some companies implement all recommendations, others implement selectively, and others ignore them entirely (Cohen, Krishnamoorthy, and Wright, 2004; Hermanson, 2000; Okafor, 2015).

The audit committee is another governance mechanism that mediates the uses and impact of audit in medium-scale companies. For public companies and certain other entities, the Companies and Allied Matters Act requires the establishment of an audit committee composed of directors and shareholders. The audit committee oversees the financial reporting process, the external audit, and the internal audit function. It receives and reviews audit reports, discusses findings with auditors, and ensures that management responds appropriately to audit recommendations. For medium-scale companies that are not public, an audit committee may still be established voluntarily as a best practice. The effectiveness of the audit committee depends on the independence, financial expertise, and diligence of its members. In many Nigerian medium-scale companies, however, audit committees are either non-existent or ineffective, limiting the impact of audit on management (CAMA, 1990; SEC, 2019; Okafor, 2015).

The uses of audit information in managing medium-scale companies encompass both financial and operational dimensions. Financially, audited financial statements enhance the credibility of the company’s financial position when applying for bank loans, trade credit, or investment. Banks and other financial institutions routinely require audited financial statements as a condition for lending; the audit opinion (unqualified, qualified, adverse, or disclaimer) influences the lender’s assessment of credit risk. Operationally, audit reports (both internal and external) identify areas where internal controls are weak, where processes are inefficient, where risks are not properly managed, and where compliance with policies and regulations is lacking. Management can use this information to prioritise improvements, allocate resources, and monitor progress. Strategically, the discipline of preparing for an audit (ensuring that records are complete, reconciliations are performed, and controls are documented) imposes a rigour that benefits the company throughout the year (Carey, Monroe, and Shailer, 2011; Lennox and Pittman, 2011; Okafor, 2015).

The impact of audit on the management of medium-scale companies can be measured across multiple dimensions. Financial performance impact: companies that have effective audits (high-quality external audits, robust internal audit functions) may demonstrate higher profitability, better asset management, and reduced losses from fraud and error. Governance impact: audits improve the quality of information available to the board and management, enhancing decision-making. Compliance impact: audits reduce the risk of penalties for non-compliance with tax laws, labour laws, environmental regulations, and industry-specific regulations. Operational impact: audit recommendations lead to process improvements, cost savings, and efficiency gains. Risk management impact: audits identify risks (credit, liquidity, operational, compliance) that management may have overlooked, enabling proactive mitigation. The magnitude of these impacts depends on the quality of the audit (auditor competence, independence, thoroughness) and on management’s responsiveness to audit findings (DeAngelo, 1981; Carcello, Hermanson, and Huss, 1995; Okafor, 2015).

The cost of audit is an important consideration for medium-scale companies. Audits are not free; external audit fees can be substantial, particularly if the company is large or complex, or if the company engages one of the “Big 4” audit firms (Deloitte, EY, KPMG, PwC). Internal audit functions also have costs (salaries, training, technology). Medium-scale companies must weigh these costs against the benefits of audit: improved access to credit (lower interest rates), reduced losses from fraud and error, improved operational efficiency, and enhanced credibility with stakeholders. For many medium-scale companies, the benefits of audit outweigh the costs, particularly if they are seeking bank financing or if they have significant assets at risk. However, some medium-scale companies view audit as a compliance burden rather than a value-adding activity, and they may minimise audit costs (e.g., by using less expensive auditors, limiting audit scope) to the detriment of audit quality and impact (Casterella, Francis, Lewis, and Walker, 2004; Hope and Langli, 2010; Okafor, 2015).

The quality of audit services available to medium-scale companies in Nigeria varies significantly. At the top end, the Big 4 audit firms (Deloitte, EY, KPMG, PwC) offer high-quality audits with experienced staff, rigorous quality control, and international best practices. However, these firms are expensive and may not be interested in very small medium-scale companies. At the middle level, there are second-tier and third-tier firms (e.g., Akintola Williams Deloitte, Kreston, Moore Stephens, BDO, and many local firms) that offer competent services at lower fees. At the lower end, there are sole practitioners and small firms whose quality is variable; some are competent, others are not. The choice of auditor affects the uses and impact of audit: a low-quality audit provides little assurance and may not detect material misstatements or provide useful recommendations; a high-quality audit provides greater assurance and more valuable insights. For medium-scale companies, the challenge is to find an auditor whose fees are affordable but whose quality is acceptable (DeAngelo, 1981; Francis, 2004; Okafor, 2015).

The role of the Institute of Chartered Accountants of Nigeria (ICAN) in regulating and promoting audit quality is significant for medium-scale companies. ICAN sets ethical standards, administers professional examinations, provides continuing professional education, and disciplines members who violate standards. ICAN also provides guidance to members on auditing standards (which are based on International Standards on Auditing, ISAs) and on the application of those standards to different types of entities, including medium-scale enterprises. However, ICAN’s ability to monitor audit quality and enforce standards is limited by resources and by the fact that many auditors are in small firms that may not be subject to external quality reviews. The Financial Reporting Council of Nigeria (FRCN) also has regulatory authority over auditors of public interest entities, but most medium-scale companies are not within FRCN’s direct oversight, except through professional registration (ICAN, 2020; FRCN, 2011; Okafor, 2015).

1.2 Statement of Problems

Despite the statutory requirement for external audit and the potential benefits of internal audit, many medium-scale companies in Nigeria underutilise the audit function, treat audit as a compliance burden rather than a management tool, and fail to realise the potential benefits of audit for improving financial management, internal controls, and overall business performance. The Auditor-General’s reports (for public sector) and anecdotal evidence suggest that many private sector companies, including medium-scale enterprises, have weak internal controls, suffer losses from fraud and error, have limited access to credit (partly due to low-quality financial information), and fail to implement audit recommendations. The gap between the potential uses and impact of audit and the actual utilisation and outcomes constitutes the central problem addressed by this study (Odia and Ogiedu, 2013; Umoren and Enang, 2015; Okafor, 2015).

The first critical problem concerns the limited understanding among managers of medium-scale companies about the uses of audit beyond statutory compliance. Many managers view audit as a necessary evil imposed by law, rather than as a value-adding management tool. They may not read the management letter, may not discuss findings with auditors, may not implement recommendations, and may not invest in internal audit functions. Consequently, they miss opportunities to improve internal controls, reduce risks, and enhance operational efficiency. The problem is that without an understanding of the potential uses of audit, managers will continue to underinvest in audit quality and underutilise audit findings, perpetuating weak internal controls and suboptimal performance (Adeyemi, 2012; Nweze, 2016; Okafor, 2015).

The second critical problem concerns the limited access to credit faced by many medium-scale companies, which is partly attributable to the low quality of financial information and the lack of credible audit assurance. Banks require audited financial statements to assess creditworthiness, but if the audit is low-quality (or if the company has not had an audit), the bank cannot rely on the financial statements. Some medium-scale companies avoid audit altogether to save costs, thereby closing off access to formal credit. Others engage low-cost, low-quality auditors whose opinions provide little assurance. The problem is that without high-quality audit assurance, medium-scale companies face higher borrowing costs (if they can borrow at all), constraining their growth and investment capacity (Carey, Monroe, and Shailer, 2011; Lennox and Pittman, 2011; Umoren and Enang, 2015).

The third critical problem concerns the weak internal control environment in many medium-scale companies, which increases the risk of fraud, error, and misappropriation. Many medium-scale companies lack segregation of duties (the same person may handle cash, record transactions, and reconcile bank accounts), lack documented policies and procedures, lack authorisation controls, and lack physical controls over assets. External auditors may identify these weaknesses in management letters, but managers may not implement recommendations due to cost, lack of expertise, or resistance to change. Internal audit functions are rare in medium-scale companies, so there is no ongoing monitoring of controls. The problem is that without strong internal controls and effective auditing, medium-scale companies are vulnerable to significant losses from employee fraud, supplier fraud, customer fraud, and management override of controls (COSO, 2013; Odia and Ogiedu, 2013; Okafor, 2015).

The fourth critical problem concerns the quality of external audit services available to medium-scale companies. While there are competent auditors in Nigeria, the audit market is segmented: high-quality Big 4 firms are expensive and may not be interested in smaller medium-scale companies; lower-quality small firms may not have the expertise, resources, or quality control to perform high-quality audits. Medium-scale companies may struggle to identify competent auditors who are affordable. The problem is that low-quality audits provide false assurance (the opinion says the financial statements are true and fair, but they may not be) and do not provide useful recommendations for improvement. This undermines the entire purpose of audit (DeAngelo, 1981; Francis, 2004; Okafor, 2015).

The fifth critical problem concerns the limited evidence on the actual impact of audit on the management of medium-scale companies in Nigeria. While there is extensive literature on audit in large, publicly traded companies, there is limited empirical research on the uses and impact of audit in medium-scale companies in the Nigerian context. The findings from large-company research may not apply to medium-scale companies, which have different governance structures, different resources, and different challenges. The problem is that without Nigeria-specific empirical evidence, managers, auditors, policymakers, and educators lack guidance on how to maximise the uses and impact of audit in medium-scale companies (Odia and Ogiedu, 2013; Umoren and Enang, 2015; Adeyemi, 2012).

1.3 Aim of the Study

The specific aim of this research work is to critically examine the uses and impact of audit in managing medium-scale companies in Nigeria, with a particular focus on assessing how external audit and internal audit contribute to financial management, internal control, risk management, access to credit, and overall business performance, and to develop recommendations for maximising the benefits of audit for medium-scale companies.

1.4 Objectives of the Study

1. To examine the extent to which managers of medium-scale companies in Nigeria understand and utilise audit information (including audited financial statements, management letters, and internal audit reports) for decision-making and management improvement.

2. To assess the impact of audit on the internal control environment of medium-scale companies in Nigeria, including the identification and remediation of control weaknesses.

3. To evaluate the impact of audit on the access to credit and cost of borrowing for medium-scale companies in Nigeria, including the role of audited financial statements in lending decisions.

4. To examine the relationship between audit quality (auditor characteristics, audit firm size, audit fees) and the benefits realised by medium-scale companies from the audit process.

5. To develop recommendations for improving the uses and impact of audit in managing medium-scale companies in Nigeria, including improvements to audit quality, management awareness, internal audit adoption, and regulatory framework.

1.5 Research Questions

1. To what extent do managers of medium-scale companies in Nigeria understand and utilise audit information for financial management, internal control improvement, risk management, and strategic decision-making?

2. What is the impact of audit (external audit and internal audit) on the internal control environment of medium-scale companies in Nigeria, and how do managers respond to audit recommendations?

3. How does audit affect the access to credit and cost of borrowing for medium-scale companies in Nigeria, and do banks rely on audited financial statements in their lending decisions?

4. What is the relationship between audit quality (auditor characteristics, audit firm size, audit fees) and the benefits (improved financial management, reduced losses, better credit access) realised by medium-scale companies?

5. What recommendations can be developed to improve the uses and impact of audit in managing medium-scale companies in Nigeria?

1.6 Research Hypotheses

Hypothesis 1

H0₁: Audit has no significant impact on the internal control environment (control weaknesses identification and remediation) of medium-scale companies in Nigeria.

H1₁: Audit has a significant impact on the internal control environment of medium-scale companies in Nigeria.

Hypothesis 2

H0₂: Audit has no significant impact on the access to credit (likelihood of loan approval, lower interest rates) for medium-scale companies in Nigeria.

H1₂: Audit has a significant impact on the access to credit for medium-scale companies in Nigeria.

Hypothesis 3

H0₃: There is no significant relationship between audit quality (auditor independence, competence, thoroughness) and the financial performance of medium-scale companies in Nigeria.

H1₃: There is a significant relationship between audit quality and the financial performance of medium-scale companies in Nigeria.

Hypothesis 4

H0₄: Managers of medium-scale companies in Nigeria do not significantly utilise audit information (audited financial statements, management letters, internal audit reports) for decision-making and management improvement.

H1₄: Managers of medium-scale companies in Nigeria significantly utilise audit information for decision-making and management improvement.

Hypothesis 5

H0₅: There is no significant relationship between the adoption of internal audit functions and the operational efficiency (reduced losses, improved processes) of medium-scale companies in Nigeria.

H1₅: There is a significant relationship between the adoption of internal audit functions and the operational efficiency of medium-scale companies in Nigeria.

1.7 Justification of the Study

This study is justified by the critical importance of medium-scale companies for employment generation, economic diversification, and sustainable development in Nigeria. Medium-scale companies contribute significantly to GDP, provide formal employment for millions of Nigerians, and serve as suppliers and customers for large corporations. However, these companies face significant challenges: limited access to credit, weak internal controls, vulnerability to fraud and error, and high failure rates. Audit has the potential to mitigate many of these challenges by improving financial information quality, strengthening internal controls, enhancing credibility with lenders, and providing management with actionable recommendations. Understanding the uses and impact of audit in medium-scale companies is essential for designing policies, programmes, and interventions that support the growth and sustainability of this vital sector. The study is further justified by the limited empirical research on audit in medium-scale companies in Nigeria, as most existing research has focused on large, publicly traded companies or on the banking sector. This study addresses this gap by providing empirical evidence on the uses and impact of audit in medium-scale companies (Okafor, 2015; Adeyemi, 2012; Nweze, 2016; Umoren and Enang, 2015).

1.8 Significance of the Study

This study makes significant contributions to multiple stakeholder groups with interests in medium-scale company development and audit practice in Nigeria. For managers and owners of medium-scale companies, the study provides evidence on the benefits of audit (improved internal controls, better credit access, reduced losses) and guidance on how to maximise these benefits (selecting high-quality auditors, implementing audit recommendations, establishing internal audit functions). For auditors (external audit firms and internal audit professionals), the study provides insights into the needs and expectations of medium-scale company clients, enabling auditors to tailor their services to deliver maximum value. For banks and other creditors, the study provides evidence on the reliability of audited financial statements from medium-scale companies and the relationship between audit quality and credit risk, informing lending policies. For regulators (CAMA, FRCN, ICAN), the study provides evidence on the effectiveness of current audit requirements for medium-scale companies and recommendations for regulatory improvements. For policymakers (Ministry of Industry, Trade and Investment, SMEDAN), the study provides evidence to inform policies and programmes supporting medium-scale company development, including potential audit subsidies or technical assistance. For academic researchers, the study contributes to the limited literature on audit in medium-scale companies in developing economies, testing and extending audit theories in the Nigerian context (Okafor, 2015; Adeyemi, 2012; Carey, Monroe, and Shailer, 2011).

1.9 Scope of the Study

The scope of this study is delimited to an examination of the uses and impact of audit in managing medium-scale companies in Nigeria. The study focuses specifically on medium-scale companies as defined by the National Bureau of Statistics and SMEDAN (assets between N50 million and N500 million excluding land and buildings; employment between 10 and 200 employees). The study examines both external audit (statutory audit by independent chartered accountants) and internal audit (internal audit functions, whether staff or outsourced). The study examines the uses of audit information (financial statements, management letters, internal audit reports) and the impact of audit on internal controls, financial management, access to credit, operational efficiency, and overall performance. The study includes medium-scale companies across various sectors (manufacturing, services, trading, construction, etc.) but does not include small-scale or micro-enterprises (which may have different audit needs and practices) or large-scale companies (which have more sophisticated audit functions). The study does not include public sector entities. The study is cross-sectional (survey-based) and does not track changes over time. The study relies on primary data from managers and owners of medium-scale companies and does not include secondary data analysis (e.g., financial statement analysis) except for descriptive purposes.

1.10 Definition of Terms

Audit: A systematic and independent examination of books, accounts, documents, and vouchers of an organisation to ascertain how far the financial statements present a true and fair view of the state of affairs of the organisation, and to express an opinion thereon (Arens, Elder, and Beasley, 2017; Okafor, 2015).

External Audit: An audit performed by independent chartered accountants (external to the organisation) who are appointed by the shareholders (or directors) to express an opinion on the financial statements and to report to shareholders (Federal Republic of Nigeria, 1990; Okafor, 2015).

Internal Audit: An independent, objective assurance and consulting activity designed to add value and improve an organisation’s operations, including evaluating and improving the effectiveness of risk management, internal control, and governance processes (IIA, 2017; Pickett, 2018).

Medium-Scale Company (Medium-Scale Enterprise) : A business enterprise with assets (excluding land and buildings) between N50 million and N500 million, and/or employment between 10 and 200 employees, as defined by the National Bureau of Statistics and SMEDAN (NBS/SMEDAN, 2013).

Management Letter: A letter from the external auditor to management (and those charged with governance) communicating significant deficiencies in internal control, other observations that could improve operations, and recommendations for improvement (Cohen, Krishnamoorthy, and Wright, 2004; Okafor, 2015).

Audit Quality: The probability that an auditor will both discover (detect) a material misstatement and report (correct) that misstatement, determined by auditor independence, technical competence, professional scepticism, and adequacy of audit procedures (DeAngelo, 1981; Francis, 2004).

Internal Control: A process, effected by an entity’s board of directors, management, and other personnel, designed to provide reasonable assurance regarding the achievement of objectives in the categories of operations (effectiveness and efficiency), reporting (reliability), and compliance (with laws and regulations) (COSO, 2013).

Audit Committee: A committee of the board of directors (or equivalent) responsible for overseeing the financial reporting process, the external audit, the internal audit function, and internal controls (SEC, 2019; CAMA, 1990).

Audit Opinion: The conclusion expressed by the external auditor on whether the financial statements present a true and fair view in accordance with applicable accounting standards; opinions may be unqualified (clean), qualified, adverse, or disclaimer (IAASB, 2018; Okafor, 2015).

True and Fair View: The standard of assurance provided by an audit; that the financial statements reflect the economic substance of transactions, are free from material misstatement, and comply with applicable accounting standards and legal requirements (Arens, Elder, and Beasley, 2017; Okafor, 2015).

CHAPTER TWO: LITERATURE REVIEW

2.1 Theoretical Review

The theoretical foundation for examining the uses and impact of audit in managing medium-scale companies in Nigeria draws from multiple theoretical perspectives in auditing, management, corporate governance, and organisational behaviour. This section critically reviews the principal theories informing understanding of audit functions and their effects on organisational management, including agency theory, stewardship theory, the audit expectation gap theory, the information asymmetry theory, the insurance hypothesis, and the management control theory.

2.1.1 Agency Theory

Agency theory, as developed by Jensen and Meckling (1976), provides the foundational framework for understanding the demand for audit services in organisations, including medium-scale companies. The theory posits that in modern organisations where ownership is separated from control, principals (owners/shareholders) delegate decision-making authority to agents (managers). This separation creates agency problems stemming from information asymmetry (agents possess more information about their actions and the organisation than principals) and diverging interests (agents may pursue their own interests at the expense of principals). Audit serves as a monitoring mechanism that reduces information asymmetry by providing independent assurance that financial statements are free from material misstatement and that agents have acted in the principals’ interests (Jensen and Meckling, 1976; Eisenhardt, 1989; Baiman, 1990).

In the context of medium-scale companies in Nigeria, agency theory is particularly relevant. Many medium-scale companies are owner-managed, meaning that the owner is also the manager, reducing the separation of ownership and control. However, as medium-scale companies grow, they may bring in professional managers, raise equity from outside investors, or borrow from banks (creditors), creating agency relationships. Even in owner-managed firms, there can be agency relationships with employees, suppliers, customers, and tax authorities. The audit provides assurance to these stakeholders that the owner-manager is not misrepresenting the company’s financial position or performance. For example, a bank lending to a medium-scale company may require audited financial statements to reduce information asymmetry and mitigate the risk of default (Carey, Monroe, and Shailer, 2011; Lennox and Pittman, 2011; Okafor, 2015).

Agency theory predicts that the demand for audit quality will be higher when agency problems are more severe. In medium-scale companies, agency problems may be less severe than in large public companies (where ownership is widely dispersed) but more severe than in very small companies (where the owner is also the manager and all transactions are under owner’s control). As medium-scale companies grow, they typically increase their use of debt (bank loans), which creates agency problems between owners (who have limited liability) and creditors (who are exposed to default risk). Creditors demand audits to monitor the company’s financial condition. The theory also predicts that the impact of audit on management will be greater when the audit is of higher quality, as high-quality audits provide more reliable assurance and more useful recommendations (DeAngelo, 1981; Francis, 2004; Carey et al., 2011).

The application of agency theory to the Nigerian context must consider the ownership structure of medium-scale companies. Many Nigerian medium-scale companies are family-owned, with family members occupying key management positions. In such firms, agency problems between owners and managers may be minimal (since owners are managers), but there may be agency problems between controlling families and minority shareholders (if any) or between the company and creditors. The audit may serve to protect minority shareholders and creditors from expropriation by controlling families. The theory suggests that the uses and impact of audit will vary depending on the ownership structure: owner-managed firms may use audit primarily for external purposes (bank loans, tax compliance), while firms with professional managers may also use audit for internal monitoring (Jensen and Meckling, 1976; Okafor, 2015; Okike, 2007).

2.1.2 Stewardship Theory

Stewardship theory, developed by Davis, Schoorman, and Donaldson (1997), presents a contrasting view to agency theory by arguing that managers are inherently motivated to act in the best interests of owners and stakeholders, rather than pursuing self-interested behaviour. The theory posits that managers derive satisfaction from organisational achievement and professional recognition, and that their interests can be aligned with those of principals through trust, empowerment, and intrinsic motivation rather than through extensive monitoring and control mechanisms. In the context of audit, stewardship theory suggests that the primary role of audit is not to constrain and monitor managers but to enable them to demonstrate their stewardship to stakeholders. The audit provides assurance that managers have acted as responsible stewards of the resources entrusted to them (Davis, Schoorman, and Donaldson, 1997; Donaldson and Davis, 1991; Muth and Donaldson, 1998).

In medium-scale companies, stewardship theory is relevant because many owner-managers take pride in their businesses and are motivated to manage them responsibly. They may not need intensive monitoring to act in the best interests of the company. However, they still need to demonstrate stewardship to external stakeholders (banks, tax authorities, suppliers). The audit serves as a mechanism for the steward (manager) to report to the principal (owner, where different; or to external stakeholders) on how the resources have been managed. The uses of audit under stewardship theory include: providing independent verification that the steward has fulfilled his or her responsibilities; enhancing the steward’s credibility with external parties; and providing the steward with feedback on areas for improvement (Davis et al., 1997; Carey et al., 2011).

The application of stewardship theory to medium-scale companies in Nigeria suggests that managers who view themselves as stewards will welcome audit as an opportunity to demonstrate their competence and integrity, rather than resenting it as an imposition. They will use audit findings to improve the business, not just to comply with regulations. The impact of audit will be greater when the manager-steward embraces the audit process, actively engages with auditors, and implements recommendations. The theory also suggests that the relationship between the auditor and the client should be collaborative rather than adversarial, with auditors serving as trusted advisors in addition to providing assurance (Okafor, 2015; Adeyemi, 2012; Nweze, 2016).

The complementarity between agency theory and stewardship theory is important for understanding the uses and impact of audit. A hybrid approach recognises that some managers are stewards (trustworthy, motivated by achievement) while others are agents (self-interested, need monitoring). For medium-scale companies, the owner-manager may be more of a steward (if they care about the long-term success of the business) but may also have agency conflicts with creditors and minority shareholders. The audit serves both functions: monitoring (agency) and enabling demonstration of stewardship. The optimal use of audit depends on the characteristics of the manager and the company (Sundaramurthy and Lewis, 2003; Lane, 2011; Okafor, 2015).

2.1.3 Audit Expectation Gap Theory

The audit expectation gap theory, developed by Liggio (1974) and extensively analysed by the Commission on Auditors’ Responsibilities (Cohen Commission, 1978) and subsequent researchers, provides a framework for understanding the difference between what stakeholders expect from auditors and what auditors actually do. The expectation gap has two components: the reasonableness gap (difference between what stakeholders expect and what auditors can reasonably be expected to accomplish) and the performance gap (difference between what auditors can reasonably accomplish and what they actually do). In the context of medium-scale companies, the expectation gap is significant because managers and owners may have unrealistic expectations about what auditors can detect and prevent (fraud, management override) and may be disappointed when auditors do not detect fraud or prevent business failure (Liggio, 1974; Cohen Commission, 1978; Humphrey, Moizer, and Turley, 1992).

The audit expectation gap has important implications for the uses and impact of audit in medium-scale companies. If managers expect auditors to detect all fraud, they may rely excessively on the audit and not invest in internal controls, leading to higher risk of fraud. If managers expect auditors to guarantee the company’s viability, they may ignore other warning signs and not take corrective action. When the audit does not meet these unrealistic expectations, managers may become disillusioned and conclude that audit is worthless, reducing the impact of audit on management. The problem is that the expectation gap can undermine the value of audit; managers may disbelieve audit findings, ignore recommendations, or discontinue audits altogether (Okafor, 2015; Adeyemi, 2012; Nweze, 2016).

The performance gap component of the expectation gap (what auditors can reasonably do vs what they actually do) is particularly concerning for medium-scale companies. If auditors perform low-quality audits (insufficient testing, inadequate documentation, failure to identify material misstatements), they will not provide the assurance that stakeholders reasonably expect. Medium-scale companies may be more vulnerable to performance gaps because they may engage lower-cost auditors whose quality is variable. The performance gap can also arise from auditors not communicating effectively with management (e.g., not providing a management letter, not explaining findings). The impact of audit is reduced when the performance gap is large (DeAngelo, 1981; Francis, 2004; Okafor, 2015).

Reducing the audit expectation gap requires both better communication from auditors (about the nature and limitations of an audit) and better performance by auditors (to meet reasonable expectations). For medium-scale companies, auditors should clearly explain the scope of the audit, the concept of reasonable assurance, the limited responsibility for fraud detection, and the fact that an audit is not a guarantee of business viability. They should also provide management letters with actionable recommendations and follow up on implementation. Managers should be educated about what auditors can and cannot do, so that they have realistic expectations and use audit appropriately (Humphrey et al., 1992; Okafor, 2015).

2.1.4 Information Asymmetry Theory

Information asymmetry theory, rooted in the work of Akerlof (1970), Stiglitz and Weiss (1981), and others, provides a framework for understanding how differences in information between parties affect economic transactions. In the context of medium-scale companies, information asymmetry exists between the company (managers/owners) and external stakeholders: banks (who need to assess creditworthiness), investors (who need to assess value), suppliers (who need to assess payment risk), customers (who need to assess reliability), and tax authorities (who need to assess tax liability). Information asymmetry creates adverse selection (the “lemons” problem) where stakeholders cannot distinguish between good and bad companies, leading to market failure (credit rationing, higher costs). Auditing reduces information asymmetry by providing independent verification of financial information, enabling stakeholders to make informed decisions (Akerlof, 1970; Stiglitz and Weiss, 1981; Healy and Palepu, 2001).

Information asymmetry theory has important implications for the uses and impact of audit in medium-scale companies. The primary use of audit for medium-scale companies is to reduce information asymmetry with banks. When a company seeks a loan, the bank faces information asymmetry: it does not know the company’s true financial position, its ability to repay, or its management’s integrity. An audited financial statement reduces this asymmetry, enabling the bank to make a lending decision and to price the loan appropriately (lower interest rates for lower risk). Companies that have high-quality audits may obtain loans more easily and at lower cost than companies that have no audit or low-quality audits. The impact of audit on access to credit is thus a key benefit for medium-scale companies (Carey et al., 2011; Lennox and Pittman, 2011; Allee and Yohn, 2009).

Information asymmetry theory also explains the demand for audit from other stakeholders. Suppliers may extend trade credit based on audited financial statements. Customers may choose to do business with companies that have audited financial statements (as a signal of reliability). Tax authorities may rely on audited financial statements for tax assessment (though they retain the right to audit independently). The theory predicts that companies that face greater information asymmetry (e.g., smaller companies, newer companies, companies with less reputation) will benefit more from audit because the reduction in information asymmetry is more valuable. Medium-scale companies, which are often less known than large companies, thus have much to gain from audit (Healy and Palepu, 2001; Okafor, 2015).

The quality of the audit affects the degree to which information asymmetry is reduced. A high-quality audit provides greater assurance that the financial statements are free from material misstatement, thus reducing information asymmetry more effectively. A low-quality audit may not detect material misstatements, so the financial statements may still be misleading, and information asymmetry remains high. Medium-scale companies must therefore consider not just whether to have an audit, but the quality of the audit. Engaging a reputable, competent auditor signals to stakeholders that the company is confident in its financial statements and willing to undergo rigorous scrutiny. This signal is valuable in reducing information asymmetry (DeAngelo, 1981; Francis, 2004; Carey et al., 2011).

2.1.5 Insurance Hypothesis

The insurance hypothesis (also known as the “deep pockets” theory) posits that audit provides value not only through information (reducing information asymmetry) but also through insurance. Under this hypothesis, the auditor has a legal obligation to compensate investors if the audit fails to detect a material misstatement and the investor suffers a loss (audit failure). Even if the audit does not reduce information asymmetry (because the investor already had access to the information), the mere existence of an auditor with “deep pockets” (assets to pay damages) provides insurance to the investor. The value of audit thus includes both the information value and the insurance value. The insurance hypothesis has been empirically supported by studies showing that the market reacts to changes in auditor liability (e.g., after lawsuits, after regulatory changes) (Dye, 1993; Menon and Williams, 1994; Francis, 2004).

The insurance hypothesis has implications for medium-scale companies. Banks, suppliers, and other stakeholders may value the insurance provided by the auditor. If the company fails and the auditor is found to have been negligent, the stakeholder may be able to recover some of the loss from the auditor (if the auditor has assets). This insurance value reduces the stakeholder’s risk, making them more willing to extend credit or do business with the company. In Nigeria, however, the insurance value of audit may be limited because auditor liability is constrained (by law and by the difficulty of bringing successful lawsuits against auditors). The threat of litigation is low in Nigeria compared to the US, so the insurance hypothesis may be less relevant (Okike, 2007; Okafor, 2015).

The insurance hypothesis also suggests that the size of the audit firm matters: larger audit firms (Big 4) have more “deep pockets” (more assets to pay damages) and thus provide more insurance value. Medium-scale companies that engage Big 4 auditors may benefit from this insurance value, even if the actual audit quality is not different from that of smaller firms (though Big 4 are generally associated with higher quality). However, Big 4 fees are higher, so medium-scale companies must weigh the additional insurance value against the additional cost. In Nigeria, most medium-scale companies cannot afford Big 4 auditors, so the insurance value of audit from smaller firms is limited (Dye, 1993; Francis, 2004; Carey et al., 2011).

The application of the insurance hypothesis to Nigeria must consider the legal environment. The Companies and Allied Matters Act (CAMA) provides for auditor liability, but the likelihood of a successful lawsuit against an auditor in Nigeria is low. The legal system is slow and expensive, and judges may not have expertise in auditing standards. The insurance value of audit is thus lower in Nigeria than in jurisdictions with more active litigation (e.g., the US, UK). Medium-scale companies should not rely on the insurance value of audit; the primary value comes from the reduction of information asymmetry and the improvement of internal controls (Okike, 2007; Okafor, 2015).

2.1.6 Management Control Theory

Management control theory, developed by Anthony (1965), Simons (1995), and others, provides a framework for understanding how organisations design and use control systems to ensure that employees act in the organisation’s best interests. Management control systems include planning (budgeting), performance measurement, evaluation, reward systems, and monitoring (including audit). Internal audit is a key component of management control, providing independent assurance that controls are functioning as intended and that employees are complying with policies. External audit also contributes to management control by providing assurance to the board and owners about the reliability of financial information on which management control decisions are based (Anthony, 1965; Simons, 1995; Merchant and Van der Stede, 2017).

In medium-scale companies, management control systems are often less formalised than in large companies. There may be no internal audit function, no formal risk management, and limited performance measurement. In this environment, the external audit can serve as a substitute for some management control functions: the external auditor’s management letter provides recommendations for improving internal controls, and the external auditor’s report on internal control (if required) provides assurance to the board. However, external audit cannot fully substitute for internal audit because external audit is only annual, while internal audit can provide continuous monitoring (Pickett, 2018; Sawyer, Dittenhofer, and Scheiner, 2017; Okafor, 2015).

Management control theory predicts that the impact of audit on management will be greater when the audit findings are integrated into the management control system. This means that management should use audit findings to set performance targets (e.g., reduce inventory shrinkage, improve receivables collection), to allocate resources (e.g., invest in new control systems), and to evaluate employee performance. Management should also ensure that internal controls are strengthened based on audit recommendations. The uses of audit thus extend beyond compliance to active management improvement (Simons, 1995; Merchant and Van der Stede, 2017; Okafor, 2015).

The application of management control theory to medium-scale companies in Nigeria suggests that the impact of audit depends on management’s commitment to using audit findings to improve control systems. If management ignores audit recommendations, the impact is minimal. If management implements recommendations and integrates audit into ongoing management processes, the impact can be substantial. The theory also suggests that medium-scale companies should consider establishing internal audit functions, particularly as they grow. Internal audit can provide more frequent and more detailed feedback than external audit, enabling more responsive management control (Anthony, 1965; Pickett, 2018; Okafor, 2015).

2.2 Conceptual Framework

The conceptual framework for this study specifies the relationship between audit functions (independent variables) and organisational outcomes (dependent variables) in medium-scale companies, with mediating and moderating variables that affect this relationship. The framework identifies the key audit functions, the potential benefits of audit, and the factors that influence whether those benefits are realised.

2.2.1 Independent Variables: Audit Functions

The first independent variable is external audit quality, defined as the probability that the external auditor will both discover and report material misstatements in the financial statements. External audit quality is measured across multiple dimensions: auditor independence (freedom from client pressure, measured by auditor tenure, proportion of non-audit fees); auditor competence (technical knowledge, industry expertise, professional qualifications); audit procedures (extent of testing, sample size, use of analytical procedures); and reporting quality (clarity of opinion, communication of findings in management letter) (DeAngelo, 1981; Francis, 2004; Okafor, 2015).

The second independent variable is internal audit presence and effectiveness, defined as whether the medium-scale company has an internal audit function (staff internal auditors or outsourced internal audit services) and how effective that function is. Internal audit effectiveness is measured across dimensions: independence (reporting lines to the board or audit committee); competence (qualifications, training, experience); coverage (scope of audit activities); and impact (implementation of recommendations, improvement in controls) (IIA, 2017; Pickett, 2018; Okafor, 2015).

The third independent variable is management’s use of audit information, defined as the extent to which managers of medium-scale companies read, discuss, and act upon audit findings (audited financial statements, management letters, internal audit reports). This includes: reading and understanding audit reports; meeting with auditors to discuss findings; developing action plans to address recommendations; allocating resources to implement changes; and monitoring implementation progress. Management’s use of audit information is a behavioural variable that mediates the relationship between audit and organisational outcomes (Cohen, Krishnamoorthy, and Wright, 2004; Okafor, 2015; Adeyemi, 2012).

2.2.2 Mediating Variables

The relationship between audit functions and organisational outcomes is mediated by several variables. Internal control improvement is the degree to which internal controls are strengthened as a result of audit findings (segregation of duties, authorisation controls, documentation, physical controls, reconciliations). Financial information quality is the accuracy, completeness, and timeliness of financial information available to management for decision-making. Access to credit is the ability of the company to obtain bank loans, trade credit, and other financing, and the cost (interest rate) of that financing. Risk management effectiveness is the identification, assessment, and mitigation of operational, financial, and compliance risks (COSO, 2013; Carey et al., 2011; Okafor, 2015).

2.2.3 Dependent Variables: Organisational Outcomes

The dependent variable is overall company performance, measured across multiple dimensions. Financial performance is measured by profitability (return on assets, net profit margin), liquidity (current ratio, quick ratio), and efficiency (inventory turnover, accounts receivable turnover). Operational performance is measured by process efficiency (reduced waste, lower costs), quality (customer satisfaction, defect rates), and productivity (output per employee). Risk reduction is measured by reduced losses from fraud, error, and non-compliance. Growth is measured by revenue growth, employment growth, and asset growth. The specific performance measures depend on data availability and the nature of the company (Okafor, 2015; Adeyemi, 2012; Nweze, 2016).

2.2.4 Moderating Variables

The relationship between audit functions and organisational outcomes is moderated by several variables. Company size (assets, revenue, employees) affects the complexity of operations and the potential benefit from audit. Ownership structure (owner-managed vs professionally managed) affects the agency problems and the demand for audit. Industry sector affects the nature of risks and the applicability of audit recommendations. Managerial competence (education, experience, training) affects the ability to use audit information effectively. Auditor expertise (industry specialisation) affects the relevance and quality of audit recommendations. Regulatory environment (tax authority, industry regulator) affects the compliance demands placed on the company (DeAngelo, 1981; Carey et al., 2011; Okafor, 2015).

2.2.5 Representation of the Conceptual Framework

The conceptual framework can be represented as follows:

Independent Variables (Audit Functions)

• External audit quality (independence, competence, procedures, reporting)
• Internal audit presence and effectiveness
• Management’s use of audit information

Mediating Variables

• Internal control improvement
• Financial information quality
• Access to credit
• Risk management effectiveness

Moderating Variables

• Company size
• Ownership structure
• Industry sector
• Managerial competence
• Auditor expertise
• Regulatory environment

Dependent Variables (Organisational Outcomes)

• Financial performance (profitability, liquidity, efficiency)
• Operational performance (process efficiency, quality, productivity)
• Risk reduction (fraud, error, non-compliance losses)
• Growth (revenue, employment, assets)

The framework guides the empirical investigation of the uses and impact of audit in managing medium-scale companies in Nigeria, directing attention to specific audit functions, mediating and moderating variables, and organisational outcomes.

2.3 Summary of Literature Review in Tabular Format

Author(s) and Year	Strengths of the Study	Weaknesses of the Study	Limitations of the Study	Gaps Identified
Jensen and Meckling (1976)	Developed agency theory; foundational framework for understanding demand for audit as monitoring mechanism	Assumes rational self-interest; limited attention to trust, ethics, or stewardship	Theoretical framework with extensive testing in large public companies; SME context less studied	Application to medium-scale companies in Nigeria not examined; agency costs in Nigerian SME context not quantified
Davis, Schoorman and Donaldson (1997)	Developed stewardship theory; alternative to agency; emphasises trust and empowerment	May overstate managerial altruism; limited empirical evidence in SME context	Theoretical framework with limited testing in SMEs; Nigerian context not examined	Application to owner-managers of medium-scale companies not examined; stewardship vs agency in Nigerian SMEs not tested
Liggio (1974); Cohen Commission (1978)	Developed audit expectation gap theory; explains disconnect between public expectations and auditor performance	Focus on public expectations; limited attention to SME-specific expectations	Theoretical and empirical development in developed economy context; Nigeria not examined	Expectation gap for medium-scale companies in Nigeria not measured; performance gap (audit quality) for Nigerian SMEs not assessed
Akerlof (1970); Stiglitz and Weiss (1981)	Developed information asymmetry theory; explains role of auditing in reducing information asymmetry	Theoretical models with assumptions (e.g., rational actors) that may not fully hold in SME context	Theoretical framework with empirical testing primarily in financial markets; SME credit market less studied	Impact of audit on information asymmetry with banks in Nigeria not quantified; value of audit for SME credit access not assessed
Dye (1993); Menon and Williams (1994)	Developed insurance hypothesis; audit provides insurance value beyond information value	Legal liability context varies across countries; insurance value depends on litigation environment	Empirical testing primarily in US context with active litigation; Nigeria context different	Insurance value of audit in Nigeria limited by weak litigation; applicability of insurance hypothesis to Nigerian SMEs uncertain
Anthony (1965); Simons (1995)	Developed management control theory; explains role of internal audit in management control systems	Focus primarily on large organisations; SME management control less formalised	Theoretical framework with extensive testing in large organisations; SME application limited	Role of internal audit in Nigerian medium-scale companies not examined; management use of audit findings not assessed
Carey, Monroe and Shailer (2011)	Empirical study of value of auditing in SMEs; high-quality study with robust methodology	Focus on Australian SMEs; may not generalise to Nigeria (different institutional environment)	Single-country study (Australia); Nigeria-specific factors not captured	Nigerian replication needed; comparison of audit value across Nigerian SME sectors not conducted
DeAngelo (1981); Francis (2004)	Developed audit quality framework; identified determinants of audit quality	Focus on large public company audits; SME audit quality less studied	Theoretical and empirical development in public company context; SME audit quality under-researched	Audit quality determinants for Nigerian medium-scale companies not identified; relationship between audit quality and SME benefits not tested
Okafor (2015)	Comprehensive Nigerian auditing textbook; covers SME audit issues	Textbook synthesis rather than empirical research; limited primary data	Textbook with examples primarily from large companies; SME-specific research gaps remain	Empirical research on audit in Nigerian SMEs needed; uses and impact of audit not systematically studied
Odia and Ogiedu (2013)	Empirical study of auditing in Nigerian SMEs; one of few Nigerian SME audit studies	Limited sample; broad survey approach may not capture detailed processes	Cross-sectional design; self-report measures; limited generalisability	Role of internal audit not examined; impact of audit on credit access not assessed; performance effects not measured
Umoren and Enang (2015)	Examined audit quality and SME performance in Nigeria; found positive relationship	Limited sample; self-reported performance measures; cross-sectional design	Single-country study; limited generalisability across Nigerian regions	Causal relationship not established; mechanisms (through internal control, credit access) not examined
Adeyemi (2012)	Examined auditing in SME sector in Nigeria; identified practices and challenges	Descriptive study with limited statistical analysis; small sample	Early study (2012); may not capture recent reforms	Up-to-date empirical evidence needed; impact of audit on management practices not quantified