Table of Contents

1. What Is a Financial Statement Review?
2. Review vs. Audit vs. Compilation: The Three Levels of Assurance
3. The Standard Behind It: ISRE 2400 (Revised)
4. When Qatari Businesses Choose a Review Over a Full Audit
5. What's Actually Covered in a Financial Statement Review
6. What a Review Cannot Do
7. The Review Process, Step by Step
8. How a Review Connects to Other Business Decisions
9. Choosing the Right Provider for a Review Engagement
10. How HLB AG Approaches Financial Statement Reviews
11. Conclusion
12. Frequently Asked Questions

1. What Is a Financial Statement Review?

A financial statement review is an engagement in which an independent practitioner examines a company's financial statements and reports a conclusion on whether anything indicates they're not properly prepared without going through the full testing procedures of a statutory audit. It sits in the middle of a three-tier spectrum of engagements accountants offer: compilation, review, and audit, each providing a different level of assurance to whoever is going to rely on the numbers.

The confusion businesses run into is treating "review" as shorthand for "cheaper audit." It isn't. It's a distinct engagement type with its own standard, its own procedures, and its own limits on what the practitioner can and can't conclude.

2. Review vs. Audit vs. Compilation: The Three Levels of Assurance

• Compilation: the practitioner assembles financial statements from information management provides, without verifying it and without expressing any assurance at all. It's essentially organized bookkeeping output.
• Review: the practitioner performs inquiry and analytical procedures and provides limited assurance: a conclusion that nothing has come to their attention suggesting the statements are materially misstated.
• Audit: the practitioner performs detailed testing, external confirmations, and control evaluation, and provides reasonable assurance through a positive opinion that the statements present fairly, in all material respects.

The gap between "limited" and "reasonable" assurance isn't a semantic distinction; it reflects genuinely different amounts of work and genuinely different levels of comfort a reader is entitled to take from the report.

3. The Standard Behind It: ISRE 2400 (Revised)

Review engagements on historical financial statements are governed internationally by ISRE 2400 (Revised), Engagements to Review Historical Financial Statements, issued by the International Auditing and Assurance Standards Board and effective for periods ending on or after 31 December 2013. A few specifics worth knowing if you're commissioning one:

• Procedures are limited by design. ISRE 2400 restricts the practitioner's primary procedures to inquiry and analytical review not the substantive testing, control testing, or external confirmations used in an audit.
• Unexpected results trigger escalation. If analytical procedures turn up something unusual, the practitioner can't simply note it and move on ISRE 2400 requires additional procedures until the matter is resolved or shown not to affect the conclusion.
  
• The conclusion is negative-form. Rather than a positive opinion, a review report typically states that "nothing has come to our attention that causes us to believe the financial statements are not prepared, in all material respects, in accordance with the applicable financial reporting framework." That phrasing is deliberate and standardised, not a hedge unique to any one firm.
  
• Independence and quality control still apply. The practitioner must comply with applicable ethical requirements, including independence requirements. The firm performing the review must operate under a system of quality management in accordance with ISQM 1 and, where applicable, ISQM 2.

Firms in Qatar offering review services generally apply this same international standard — it's the basis most professional review reports here are actually written against, even when the engagement letter just says "review."

4. When Qatari Businesses Choose a Review Over a Full Audit

A review makes practical sense in several recurring situations:

When a full statutory audit isn't mandated but assurance is still wanted. Not every entity structure in Qatar is required to obtain a full audit; where one isn't mandated, a review gives stakeholders independent comfort without the cost and time of a full engagement.

Interim or quarterly reporting. Running a full audit every quarter is rarely practical. A review of interim financial statements gives a parent company or board a meaningful check between annual audits.

Preparing for financing. Lenders assessing a credit facility want to see financial documentation they can trust; a review is often enough to support that, depending on the facility size and the lender's own requirements. Our guide on credit facility reviews in Qatar covers what lenders specifically look for during that process.

Group reporting packages. A subsidiary may not need its own statutory audit, but the parent group's consolidation process often calls for at least a reviewed set of local financial statements.

A step before a first-time audit. Businesses moving toward their first full external audit sometimes use a review cycle first, to surface issues while the stakes and cost are lower. Our step-by-step checklist for external audit preparation is the natural next read once you're at that stage.

Ownership transitions and minority shareholder assurance. When ownership changes hands, or a minority shareholder without board access wants independent comfort on the numbers, a review is often the proportionate answer — enough independent input to be meaningful, without the cost of a full audit triggered by a single stakeholder's request.

Bidding on tenders or ICV assessments. Some tender and In-Country Value processes call for reviewed rather than audited figures at certain thresholds, particularly for smaller entities where a full audit would be disproportionate to the contract size involved.

None of these triggers are mutually exclusive a single business might reasonably move between reviews and audits from one year to the next as circumstances change, rather than picking one path permanently.

5. What's Actually Covered in a Financial Statement Review

A properly scoped review engagement typically works through:

• The balance sheet : assets, liabilities, and equity, checked for consistency and reasonableness rather than transaction-level verification.
• The profit and loss statement : revenue and expense trends analysed for anything that doesn't fit the business's known pattern.
• The cash flow statement : inflows and outflows assessed for consistency with the other two statements.
• Consistency with the applicable reporting framework : typically IFRS, checked at the level analytical review can support.
• Disclosure completeness : whether the notes to the financial statements appear to cover what the framework requires, based on inquiry rather than independent verification. Although IFRS is commonly used by entities in Qatar, a review may be conducted using another applicable financial reporting framework where that framework is appropriate to the entity and the intended users of the financial statements
  

The output is a review report plus, in most engagements, a management letter flagging anything worth the business's attention even if it didn't rise to the level of affecting the conclusion.

6. What a Review Cannot Do

This section matters as much as what a review covers, and it's the part generic service descriptions tend to skip. A review:

• Does not test controls. Unlike an audit, a review doesn't evaluate whether internal controls are operating effectively.
• Does not provide the same assurance a lender, regulator, or investor may specifically require. Some facilities, listings, or regulatory contexts require an audit by name a review won't substitute for a requirement that's specifically written as "audited financial statements."
• Does not detect fraud with the same likelihood as an audit. Limited procedures mean a review is less likely to surface a deliberately concealed misstatement than the detailed testing in an audit.
• Does not verify transactions independently. Analytical procedures and inquiry rely heavily on explanations from management; a review doesn't independently confirm balances with third parties the way an audit typically does.

None of this makes a review less useful — it makes it a different tool. Choosing between a review and an audit should start from what the assurance is actually needed for, not from cost alone.

7. The Review Process, Step by Step

• Engagement scoping ; agreeing the reporting period, framework (usually IFRS), and any specific concerns to focus on.
• Understanding the business ; the practitioner builds enough understanding of the entity and its environment to know what "normal" looks like before testing anything.
• Analytical procedures ; comparing current figures against prior periods, budgets, and industry expectations to flag anything unusual.
• Inquiry ; structured questions to management about anything the analytical work raises, plus standard inquiries on accounting policies, related-party transactions, and subsequent events.
• Escalation where needed ; following up anything unresolved with additional procedures, as ISRE 2400 requires.
• Conclusion and reporting; issuing the review report with its negative-form conclusion, plus a management letter where relevant.

A well-run review typically takes meaningfully less time than an audit of the same entity — which is the practical trade-off businesses are making when they choose one.

8. How a Review Connects to Other Business Decisions

Financial statement reviews rarely happen in isolation. In Qatar specifically, they tend to intersect with:

• Credit facility applications ; lenders reviewing governance and documentation quality as part of a facility review, as covered in our credit facility reviews guide.
• AML/CFT documentation expectations ; banks and regulators increasingly expect financial documentation and compliance frameworks to be consistent with each other; our guide to AML/CFT compliance in Qatar covers the compliance side of that picture.
• General accounting consultation ; a review often surfaces questions that go beyond the engagement itself; our piece on accountant consultation in Qatar covers when a broader advisory conversation is the right next step.
• Future statutory audit requirements ; a review this year doesn't preclude an audit next year, and the two engagements are often planned together rather than treated as unrelated events.

9. Choosing the Right Provider for a Review Engagement

A few practical checks before commissioning a review:

• Confirm the engagement will be conducted under ISRE 2400 (Revised) specifically ask, don't assume.
• Check the practitioner's independence from the entity, the same independence standard that applies to audits.
• Ask what happens if the review turns up something unexpected a provider who can't describe an escalation process isn't following the standard properly.
• Where the business may later require a statutory audit, discuss continuity, independence, and any applicable ethical requirements with the selected firm at the outset. Subject to those requirements, the same firm may be able to perform the subsequent audit.  
• If there's any chance this review will need to become a full audit later, ask whether the same firm can transition the engagement, since ISRE 2400 explicitly contemplates the reviewer not being the entity's auditor worth clarifying up front which relationship you want.
• Ask for a sample review report and management letter from a comparable engagement. The negative-form conclusion has a standard structure; if what you're shown reads like a marketing summary rather than a formal assurance report, that's worth questioning before you sign an engagement letter.
• Confirm turnaround time against your actual deadline whether that's a lender's submission date, a shareholder meeting, or a tender close rather than assuming a review will automatically be fast enough to fit.

10. How HLB AG Approaches Financial Statement Reviews

HLB AG's Financial Statements Review Services are built around the same limited-assurance framework covered above reviewing balance sheets, profit and loss statements, and cash flow statements against the applicable reporting framework, with practical recommendations alongside the formal conclusion. Where a review points toward needing a fuller engagement, our External Audit and Financial Statement Components Audits services pick up from there without requiring a new provider relationship. For a narrower, single-component question rather than a full set of statements, our Special Purpose Audits service may be the more precise fit.

11. Conclusion

A financial statement review is a genuine, standard-governed engagement not a discount audit and understanding what ISRE 2400 does and doesn't require is the difference between commissioning the right level of assurance and being surprised by what a review report can't tell you. For most Qatari businesses, the right question isn't "review or audit" in the abstract, but what the specific lender, shareholder, or regulator on the other side of the report actually needs to see.

11. Frequently asked questions

What's the main difference between a review and an audit?
A review provides limited assurance based on inquiry and analytical procedures; an audit provides reasonable assurance based on detailed testing, control evaluation, and external confirmation. They answer different questions with different levels of confidence.

Which standard governs financial statement reviews?
ISRE 2400 (Revised), Engagements to Review Historical Financial Statements, issued by the IAASB and effective for periods ending on or after 31 December 2013.

Can a review replace an audit if a lender or regulator specifically requires one?
No. Where "audited financial statements" is a specific requirement, a review does not satisfy it — the two are not interchangeable by name.

How long does a typical review take compared to an audit?
Since the procedures are limited to inquiry and analysis rather than the detailed testing an audit requires though exact timing depends on the size and complexity of the entity.

What does the review report actually say?
It states a negative-form conclusion — typically, that nothing has come to the practitioner's attention indicating the financial statements are not prepared, in all material respects, in accordance with the applicable framework rather than a positive opinion.

Does a review check internal controls?
No. Control testing is part of an audit, not a review. A review's procedures are limited to inquiry and analytical review of the financial statements themselves.

Can the same firm that reviews my statements later audit them?
The firm must evaluate and comply with applicable independence and ethical requirements before accepting the subsequent audit. It is therefore advisable to discuss the intended transition with the provider at the outset.

Is a review useful if I'll need an audit eventually anyway?
Yes many businesses use a review cycle to surface and resolve issues before their first full audit, when the cost and stakes of doing so are lower.

Does a review cost significantly less than an audit?
Generally yes, since the procedures are narrower in scope, but the exact difference depends on the size and complexity of the entity it's worth getting a scoped quote for both rather than assuming a fixed ratio.

©2026 Antonio Ghaleb and Partner CPA and HLB AG-Members of HLB. All rights reserved. These highlights have been prepared for general guidance on matters of interest only and do not constitute professional advice. You should obtain professional advice before taking action on the information contained in these highlights. Antonio Ghaleb and Partner CPA and its employees do not give any representation or warranty (express or implied) regarding the accuracy or completeness of the information contained in these highlights. Antonio Ghaleb and Partner CPA and its employees do not assume any responsibility, liability, duty of care for any negative consequences that may result in reliance to these highlights and for any decision based on them.