Auditing real estate investment trusts: Key risks and considerations

Explore the audit risks, valuation challenges, lease accounting issues, and governance considerations that shape public and private REIT audits

Auditing real estate investment trusts (REITs) involves familiar audit issues, but the size and complexity of REIT property portfolios can make those issues harder to evaluate. Lease terms, property valuations, expense classifications, related-party relationships, and changing market conditions can all affect audit risk.

Public and private REIT audits may present different risks, but both require industry knowledge, professional skepticism, and a clear understanding of the assumptions behind the numbers.

Key challenges in public REIT audits

Publicly traded REITs may hold large, diverse portfolios spanning multiple property types, markets, lease structure2s, and financing arrangements. Auditors must understand how those factors affect REIT financial reporting while addressing public-company reporting requirements and stakeholder expectations.

Lease accounting

REIT lease accounting can involve hundreds or thousands of agreements with different amendments, renewal options, escalation clauses, tenant improvement allowances, and incentives. Auditors need to evaluate whether lease income, expenses, receivables, and disclosures are complete and accurate.

Audit teams should also understand how REIT lease data moves from property-management systems into the general ledger and financial statements. Lease modifications, tenant concessions, and manual entries may require particular attention, especially when the REIT uses multiple systems.

REIT property valuation

REIT property valuation is one of the most judgment-intensive areas of a REIT audit. Auditors must evaluate management’s methods and assumptions, including rental rates, occupancy, operating costs, capitalization rates, discount rates, and projected cash flows.

Investment property valuation risks can vary considerably by property type, market, and individual asset. Auditors should determine whether management’s assumptions reflect the conditions affecting each property and whether the underlying data is complete and supportable. When management uses valuation specialists, the audit team should evaluate their work, methods, significant assumptions, and source data.

Operating and capital expenditures

Classifying operating and capital expenditures can require significant judgment in a REIT audit. Repairs, tenant improvements, renovations, replacements, and redevelopment projects may receive different accounting treatment depending on the nature and expected benefit of the work.

Auditors should look beyond the label assigned in the accounting system. They need to understand what work was completed, why it was undertaken, and whether the resulting costs were recorded appropriately.

Related-party transactions

Related-party transactions in REIT audits may involve property managers, advisory firms, joint ventures, sponsors, and other affiliated entities. These arrangements can produce transactions that are not immediately apparent from the accounting records.

Auditors should understand the relationships, business purpose, and terms of relevant transactions and determine whether they have been properly identified, authorized, accounted for, and disclosed in the REIT's financial statements.

Public REIT audit practices

Public REIT audits often involve significant judgment, large volumes of property-level data, and complex reporting considerations. The following practices can help auditors address these challenges more effectively.

• Reflect portfolio changes in the REIT audit plan. Reassess risks when occupancy, tenant concentration, performance, financing, or key assumptions change.
• Use audit technology purposefully. Apply data analytics and AI-enabled audit tools to identify unusual transactions, trends, or areas requiring further investigation.
• Test property-level data. Evaluate the completeness and accuracy of information supporting significant accounting estimates.
• Use valuation and other specialists when needed. Bring in specialist knowledge when an issue falls outside the audit team’s experience.

For a closer look at using analytics and current client data to shape engagement risk assessments, explore Digital audit transformation: Assessing risk and planning the audit.

Key challenges in private REIT audits

Private REIT audits involve many of the same issues as public REIT audits, including property valuation, related-party transactions, internal controls, and management override. However, the risks may differ because private REITs are not subject to the same public-company reporting requirements and may have more concentrated ownership.

Auditors need to understand the REIT’s ownership and governance structure, how significant decisions are made, and whether its controls are appropriate for the organization’s size and complexity.

Related-party transactions

Concentrated ownership and affiliated management arrangements can increase the significance of related-party transactions. These may involve sponsors, owners, property managers, advisory firms, joint ventures, or entities under common ownership or influence.

Auditors should evaluate whether related-party transactions have been completely identified, properly authorized, accounted for, and disclosed. Transactions outside the normal course of business or supported by limited documentation may require closer examination.

Property valuations

Property valuation in a private REIT audit may be particularly challenging when comparable market information is limited or a property is located in a less active market. Management’s estimate may depend heavily on assumptions about rental income, occupancy, operating costs, capitalization rates, discount rates, and future cash flows.

Auditors should evaluate the valuation method, significant assumptions, and underlying property data. They should also consider whether changes in tenant demand, financing, capital plans, or property performance have been reflected in management’s analysis.

When management uses a valuation specialist, the audit team should assess the specialist’s competence, capabilities, and objectivity and evaluate the methods, assumptions, and data used.

Internal controls in private REIT audits

Private REITs may have smaller finance teams, fewer layers of review, or less formal governance structures. These characteristics do not necessarily indicate ineffective REIT internal controls, but they can affect segregation of duties and the review of financial reporting judgments.

Auditors should understand who initiates and authorizes transactions, reviews accounting estimates, and monitors property-level financial information. Journal entries, valuation adjustments, affiliated transactions, and changes to significant assumptions may warrant additional scrutiny.

Documenting professional judgment: See what drives audit quality outcomes

Practices that can strengthen the audit

• Understand ownership and governance. Identify the parties that direct or influence the REIT, including sponsors, managers, affiliates, and joint venture partners.
• Examine related-party activity.. Assess how management identifies related parties, and investigates information that may indicate undisclosed relationships or transactions.
• Test valuation data and assumptions. Evaluate whether property-level information is complete, and whether assumptions reflect the individual asset and market.
• Tailor procedures to the control environment.  Consider how limited segregation of duties or review controls affects assessed risk and planned procedures.
• Keep conclusions evidence-based. Apply professional skepticism without assuming that concentrated ownership or less formal controls indicate a problem.

Commercial real estate audit risks in a changing market

Commercial real estate audit risks vary by property type, geographic market, and asset quality. Tenant demand, occupancy, financing, and property performance can affect the assumptions underlying a REIT’s financial reporting.

The key audit question is not whether commercial real estate overall is improving or declining. It is whether management’s estimates reflect the conditions affecting the REIT’s properties. Portfolios may include assets with very different occupancy levels, tenant demand, financing needs, and projected cash flows.

Auditors should consider how those conditions affect lease receivables, lease income, property impairment, investment property valuations, forecasts, and disclosures. REIT refinancing risk may require particular attention when significant debt is approaching maturity or the REIT expects to refinance under different market conditions.

The PCAOB staff Spotlight, Auditing Considerations Related to Commercial Real Estate, identifies risk assessment, fraud, asset impairment, credit losses, going concern, and interim reviews as areas for auditor consideration. Although primarily directed to public-company auditors, the Spotlight provides a useful framework for evaluating commercial real estate audit risks in a REIT engagement.

Broad market information can provide context, but it does not replace property-level evidence or an understanding of management’s assumptions.

REIT property valuation considerations

• Evaluate properties at the right level. Avoid portfolio averages that obscure differences among assets.
• Test valuation data and assumptions. Compare rental rates, occupancy, operating costs, capitalization rates, discount rates, and cash-flow projections with relevant evidence.
• Identify period-over-period changes. Consider vacancies, lease modifications, tenant difficulties, financing changes, delayed projects, and revised property plans.
• Assess impairment and refinancing risks. Evaluate impairment indicators, debt terms, liquidity needs, and cash-flow assumptions
• Investigate conflicting evidence. Do not let improvement in one part of the portfolio obscure deterioration elsewhere.

See how modern research tools can support digital audit transformation by helping auditors research complex accounting questions and support judgment-driven conclusions.

REIT audits demand context and judgment

Auditing real estate investment trusts requires an understanding of how lease structures, property performance, financing, related-party relationships, and market conditions affect the financial statements. Those risks can differ between public and private REITs and from one property to another.

Technology can help audit teams analyze portfolio data and identify unusual activity, but it does not replace business understanding, professional skepticism, or sound judgment. Strong REIT audits connect broader market developments to the entity’s properties, assumptions, accounting estimates, and disclosures.

For a broader view of how analytics, AI, and connected workflows are changing audit work, read Audit’s digital revolution: How technology is reshaping the industry.