Skip to main content
Oversight Institute
Category: Assessment and Due Diligence

Going Concern Assessment

Also known as: Going Concern Evaluation, Going Concern Basis of Accounting Assessment
Simply put

A going concern assessment is an evaluation of whether a business is expected to keep operating into the foreseeable future rather than shutting down or being liquidated. In financial reporting, a company is generally assumed to be a going concern unless there is significant information suggesting otherwise. For third-party risk purposes, signs that a supplier may not be a going concern can indicate elevated financial and continuity risk in that relationship.

Formal definition

A going concern assessment is management's evaluation, often examined by auditors, of whether an entity has the ability to continue as a going concern into the foreseeable future. Under prevailing accounting and auditing frameworks, continuation as a going concern is presumed as the basis of financial reporting in the absence of significant information to the contrary, with liquidation-basis reporting applied when liquidation becomes imminent. In assessing the appropriateness of the going concern assumption, management considers all reasonably available information about the future, including exposure to solvency and liquidity risks and plans to navigate them. As applied within third-party and supply chain risk management, this assessment is an input into evaluating a counterparty's financial viability and continuity risk; it is not itself a TPRM control. Its limitations should be noted: a going concern conclusion is typically point-in-time, reflects management judgment and available information at the reporting date, can become stale, and does not by itself address operational, geopolitical, information security, or ESG risks. Disclosure thresholds, terminology, and the specific accounting and auditing requirements vary across jurisdictions and standard-setters.

Why it matters

For third-party and supply chain risk professionals, a supplier's viability is a foundational concern: a counterparty that ceases operating cannot deliver goods or services, honor warranties, or maintain contractual obligations, regardless of how strong its security or performance controls may be. A going concern assessment offers a structured, financially grounded signal about whether an entity is expected to continue operating into the foreseeable future. When management or auditors raise substantial doubt about an entity's ability to continue as a going concern, that can indicate elevated financial and continuity risk in the relationship, warranting closer scrutiny, contingency planning, or reconsideration of dependency on that supplier.

The going concern basis is not a niche accounting formality. Under prevailing frameworks, continuation as a going concern is presumed as the very basis for financial reporting in the absence of significant information to the contrary, with liquidation-basis reporting applied only when liquidation becomes imminent. A shift away from this presumption, or a disclosed material uncertainty, is therefore a meaningful escalation that risk teams should not overlook when reviewing a counterparty's financial statements or audit reports.

Its value, however, should be weighed against clear limitations. A going concern conclusion is typically point-in-time, reflects management judgment and the information available at the reporting date, and can become stale as circumstances change. It also does not, by itself, address operational, geopolitical, information security, or ESG risks. Treated as one input among several rather than a definitive verdict on supplier health, it strengthens financial viability analysis without substituting for ongoing monitoring or broader continuity assessment.

Who it's relevant to

Third-Party Risk and Financial Viability Analysts
Analysts assessing a counterparty's financial health can use going concern conclusions and any disclosed material uncertainties as a signal of elevated financial and continuity risk. Because such conclusions are point-in-time and reflect information at the reporting date, they are best used alongside other viability indicators and refreshed through ongoing monitoring rather than relied on as a standing judgment.
Procurement and Supplier Onboarding Teams
During onboarding and periodic review, procurement teams may examine a supplier's financial statements and audit opinions for going concern disclosures that could affect the supplier's ability to deliver over the contract term. This supports risk tiering and contingency planning but does not address operational, security, or ESG dimensions that require separate evaluation.
Business Continuity and Resilience Planners
Where a supplier represents a significant dependency, indications of substantial doubt about its going concern status can inform continuity planning, including consideration of alternatives. Planners should note that a going concern assessment reflects financial viability at a reporting date and does not by itself measure operational or logistical continuity risk.
Compliance and Audit Functions
Compliance and internal audit staff working across jurisdictions should recognize that disclosure thresholds, terminology, and accounting and auditing requirements for going concern vary across standard-setters. This affects how comparable going concern information is between suppliers reporting under different regimes, and how much weight it can bear in a consolidated risk view.

Inside Going Concern Assessment

Financial viability indicators
Metrics and signals used to evaluate whether a third party can continue operating for the foreseeable future, such as liquidity, solvency, cash flow trends, debt levels, and profitability. In a TPRM context these are typically drawn from financial statements, credit reports, or third-party financial health scores, and their availability varies considerably between publicly listed and privately held suppliers.
Auditor's going concern opinion
A statement in audited financial statements indicating whether management's use of the going concern basis of accounting is appropriate and whether material uncertainty exists about the entity's ability to continue operating. This opinion is prepared under applicable accounting and auditing standards and is not a TPRM control in itself; it is one external input that may inform a supplier viability assessment.
Material uncertainty disclosure
Disclosure of conditions or events that, individually or collectively, may cast significant doubt on the entity's ability to continue as a going concern. Such disclosures signal elevated risk but do not by themselves indicate imminent failure, and their absence does not confirm long-term stability.
Qualitative and contextual factors
Non-financial considerations that affect continued viability, including management quality, loss of a major customer or contract, litigation exposure, geopolitical conditions, and sector-specific pressures. These typically fall outside the numeric financial ratios and require separate analysis.
Assessment horizon and timing
The forward-looking period over which viability is evaluated and the point-in-time nature of the assessment. Because financial condition can change between reporting periods, the horizon and the currency of the underlying data are integral components of interpreting any going concern conclusion.

Common questions

Answers to the questions practitioners most commonly ask about Going Concern Assessment.

Does a going concern assessment confirm that a supplier is financially healthy?
No. A going concern assessment addresses whether an entity is likely to continue operating for a defined period (typically the next twelve months from the reporting date, depending on the accounting framework) rather than certifying overall financial health, profitability, or creditworthiness. An entity can operate as a going concern while still carrying significant financial strain, liquidity pressure, or elevated default risk. Treating a clean going concern conclusion as a broad financial fitness endorsement overstates its scope. In many programs it is used as one input among several, alongside credit ratings, liquidity metrics, and other financial risk indicators.
Is a going concern assessment the same as an independent verification of a supplier's viability?
Not necessarily. A going concern assessment as expressed in audited financial statements reflects a judgment involving both management's assessment and the auditor's evaluation of it, but where a supplier self-reports its going concern status, that is an attestation rather than an independently verified conclusion. The distinction matters: management's own view of its ability to continue operating is inherently interested, and the level of assurance differs from an external auditor's evaluation. Programs should be clear about the source and assurance level of any going concern information they rely on.
At what point in the third-party lifecycle should a going concern assessment be used?
Going concern information is commonly reviewed at onboarding as part of financial due diligence, but a point-in-time conclusion can become stale as circumstances change. Many programs supplement onboarding review with periodic refreshes and event-driven triggers, with frequency often tied to the supplier's risk tier or criticality. Relying solely on an onboarding-stage assessment leaves a program exposed to deterioration that occurs after the review date.
How can we access going concern information for private suppliers that do not publish audited financials?
Visibility is often limited for private or smaller suppliers that are not subject to the same disclosure requirements as public companies, and this varies by jurisdiction. Where audited financial statements are unavailable, programs may rely on supplier-provided attestations, third-party financial risk data providers, credit information, or contractual rights to request financial information. Each source carries different assurance levels and limitations, and the absence of an independent going concern opinion should be recorded as a gap rather than assumed to indicate stability.
How does a going concern assessment fit alongside other supplier financial risk indicators?
It is typically treated as one signal within a broader financial risk view rather than a standalone determinant. Because it addresses continuity over a defined horizon and not the full spectrum of financial, operational, geopolitical, or concentration risk, many programs combine it with credit scores, liquidity and leverage metrics, payment behavior, and market indicators. Interpreting it in isolation can create a misleading picture of a supplier's resilience.
What limitations should be documented when relying on a going concern assessment?
Key limitations to record include the point-in-time nature of the conclusion and its potential to become outdated, the assurance level and source of the information (audited opinion versus self-attestation), the defined time horizon the assessment covers, and its narrow scope relative to broader financial and operational risks. Programs should also note where information is unavailable or unverified and, where relevant, that disclosure and reporting requirements differ across regions and sectors.

Common misconceptions

A going concern assessment guarantees that a supplier will not fail within the assessment horizon.
It is a judgment based on available information at a point in time, not a guarantee. Conditions can deteriorate after the assessment, and material uncertainty may exist even where no explicit warning is issued. It informs, but does not eliminate, financial viability risk.
An auditor's going concern opinion is equivalent to a certification of the supplier's financial health.
An auditor's opinion addresses the appropriateness of the going concern basis of accounting under applicable standards; it is not a certification, a rating, or an endorsement of ongoing solvency. It is one external input and should be corroborated with other financial and qualitative indicators.
A going concern assessment covers all forms of third-party risk.
It centers on financial viability and continued operation. It does not by itself address information security, operational resilience, geopolitical, or ESG risk, nor does it substitute for ongoing monitoring; those require separate controls and assessments.

Best practices

Treat the going concern assessment as one component of a broader financial viability and resilience evaluation rather than a standalone verdict, and integrate it with qualitative and contextual risk factors.
Distinguish between the auditor's opinion and independent analysis; where financial statements are unavailable, as is common with privately held suppliers, document the reduced visibility and rely on alternative indicators.
Define and record the assessment horizon and the date of the underlying data so that conclusions are interpreted as point-in-time judgments and refreshed on a cadence aligned to the supplier's risk tier.
Scale the depth of assessment to criticality and dependency, applying more rigorous financial scrutiny to suppliers whose failure would represent a single point of failure or concentration risk.
Establish trigger-based reassessment for events such as loss of a major contract, material uncertainty disclosures, or adverse credit changes, rather than relying solely on periodic reviews.
State explicitly the limitations and scope of the assessment in reporting, including that it addresses financial viability but not security, operational, or ESG risk, and that it does not guarantee continued operation.
Promotional banner for the Penetration Report Template Kit