MYCPE ONE

In today’s regulatory landscape, learning compliance is no longer viewed as just an individual’s responsibility. It is a firm-wide obligation, and regulators are watching closely.

The GAO Yellow Book requires firms auditing government entities to demonstrate that all team members collectively meet strict learning standards. Similarly, the PCAOB expects firms auditing public companies to enforce CPE cycles of 20 hours annually and 120 hours every three years, with subject-specific allocations. 

Add the AICPA, SOX training requirements, COSO principles, and EBPAQC commitments, and the message is clear: firms must not only ensure their professionals are trained, but also maintain systems to track, document, and enforce compliance at scale.

GAO Yellow Book (Government Auditing Standards)

The Yellow Book sets the bar for professionals performing audits of government entities and federally funded programs. It requires auditors to complete 80 hours of CPE every two years, with at least 24 hours focused on government-specific topics.

For firms engaged in government work, compliance with this standard is critical to maintain eligibility for engagements and to demonstrate competence in handling sensitive taxpayer-funded programs.

Key Requirements

  • 80 hours of CPE every 2 years.
  • 24 hours must be in government auditing, internal controls, ethics, or reporting.
  • CPE must align directly with Yellow Book topics.

Why It Matters for Firms

  • Non-compliance can disqualify firms from government contracts.
  • Builds credibility with public-sector clients.
  • Ensures teams are up to date on evolving government auditing standards.

Stay compliant with confidence 👉 Explore MYCPE ONE’s All-Access CPE Subscription to get firm-wide access to government auditing, ethics, and Yellow Book-approved courses.

PCAOB (Public Company Accounting Oversight Board)

For auditors of public companies, the PCAOB enforces a more structured learning cycle. Professionals must complete 20 hours annually and 120 hours every three years, with at least 8 hours per year in accounting and auditing.

These requirements are designed to keep public company auditors at the cutting edge of technical, ethical, and regulatory developments. Firms that fail to meet these requirements risk inspection findings, reputational damage, and loss of public trust.

Key Requirements

  • 20 hours of CPE every year.
  • 120 hours total over 3 years.
  • 8 hours annually in accounting and auditing.

Why It Matters for Firms

  • PCAOB inspections directly examine training compliance.
  • Ensures teams maintain technical precision under SEC oversight.
  • Reduces the risk of deficiencies in audit quality reviews.

Streamline your firm’s compliance today 👉 Explore Our Teams CPE and automate PCAOB and AICPA learning requirements across all team members.

EBPAQC (Employee Benefit Plan Audit Quality Center)

The AICPA’s Employee Benefit Plan Audit Quality Center (EBPAQC) supports firms that perform employee benefit plan audits, an area with heightened scrutiny due to DOL and IRS oversight. While EBPAQC itself doesn’t mandate specific CPE hours, membership in the center signals a commitment to specialized training and audit quality in this niche area.

Firms that participate in EBPAQC typically commit to ongoing training in employee benefit plan auditing standards, ERISA requirements, and evolving DOL regulations, often beyond minimum CPE rules.

Key Requirements

  • No fixed statutory hours; training guided by EBPAQC membership commitments.
  • Focus areas include ERISA, DOL, IRS, and plan-specific auditing standards.

Why It Matters for Firms

  • Elevates audit quality in a high-risk, specialized area.
  • Demonstrates commitment to regulators and plan sponsors.
  • Differentiates firms as leaders in employee benefit plan auditing.

AICPA Membership

The AICPA requires its members to maintain 120 hours of CPE every three years, covering ethics, auditing, and general professional competence. While this standard often overlaps with state board rules, firms cannot afford to treat it as optional.

For firms, AICPA compliance signals a baseline of professional integrity and competence across practice areas. It also simplifies alignment with other frameworks by ensuring broad-based coverage of learning.

Key Requirements

  • 120 hours every 3 years.
  • Broad coverage including ethics and technical competence.

Why It Matters for Firms

  • Overlaps with state board rules, reducing duplication when managed properly.
  • Demonstrates commitment to professional competence.
  • A baseline standard for credibility with clients and peers.

Sarbanes-Oxley Act (SOX)

While SOX doesn’t prescribe specific CPE hours, its impact on firms is undeniable. For firms auditing public companies, annual training on internal controls over financial reporting (ICFR) has become the norm.

Firms must ensure their teams are well-trained on risk assessment, compliance, and control frameworks to avoid deficiencies in ICFR audits, which are high-stakes reviews for regulators and investors.

Key Requirements

  • No fixed CPE hours mandated.
  • Firms typically require annual SOX-related training.

Why It Matters for Firms

  • Essential for maintaining compliance in ICFR audits.
  • Reduces risk of PCAOB findings tied to internal control testing.
  • Demonstrates proactive commitment to investor protection.

COSO Framework

The COSO framework is widely adopted for internal control and risk management, especially in firms performing internal audits. While COSO itself doesn’t dictate hours, firms must provide risk-based training aligned with COSO principles, fraud prevention, governance, and controls.

This ensures staff can properly assess and design control environments, especially where SOX compliance and risk oversight are in play.

Key Requirements

  • No statutory CPE requirement.
  • Firms must tailor training based on internal risks.

Why It Matters for Firms

  • Strengthens internal control and governance practices.
  • Provides alignment with SOX compliance.
  • Helps reduce fraud and operational risks in client engagements.

When Firm-Imposed Compliance

Beyond these frameworks, many firms add stricter internal rules to safeguard quality:

  • By Cycle: More frequent check-ins (annual rather than 3-year cycles).
  • By Subject Area: Requiring minimum hours in ethics, industry-specific training, or technology.
  • By Hours: Adding a margin of safety above regulator minimums.

These firm-level overlays ensure no professional falls behind and that audit quality withstands regulatory scrutiny.

How MYCPE ONE Helps Firms Stay 100% Compliant

Tracking multiple frameworks, cycles, and firm-specific overlays is a challenge. That’s where MYCPE ONE helps:

  • State boards & NASBA Compliance for CPA Qualification across all 50 states. 
  • Integrated learning plans covering GAO, PCAOB, AICPA, SOX, COSO, and EBPAQC.
  • Custom Compliance feature tailored to organization needs.  
  • Custom Certification Issuance in the name of firms (If NASBA Registered). 
  • Automated tracking & reporting to ensure no one misses deadlines.
  • Comprehensive course catalog spanning all subject areas.
  • Firm-level dashboards for compliance managers to oversee progress in real time. 

With MYCPE ONE, firms can move beyond the stress of compliance and focus on what matters most: delivering quality service with confidence.

Final Thought

CPE compliance is not about ticking boxes. It’s about protecting a firm’s reputation, staying ahead of regulatory expectations, and empowering professionals with the knowledge they need to serve clients effectively.

And with the right partner, achieving 100% compliance is not just possible, it’s seamless.

MYCPE ONE can help your firm align learning, compliance, and strategy.

Amrit Singh

Amrit Singh

Amrit Singh is a business leader with 10+ years of experience in continuing education. Helping accounting, tax, and finance professionals stay compliant with ease, he began his journey as a consultant. Learning across industries before stepping into a leadership role, he is shaped by both successes and failures. Amrit is passionate about problem-solving, building products, exploring technology, and mentoring future leaders. He is dedicated to transform continuing education, making it simpler, smarter, and more meaningful. Through his blogs and talks, he shares insights on accounting careers, CPA compliance, and the future of continuing education.

Must Read Blogs