How four accounting firms became the operating system of modern governance

The Big Four

In 2024, a European government department quietly awarded a major transformation contract to one of the Big Four. The firm would redesign core data systems, advise on regulatory compliance, oversee risk management frameworks and later help audit the results. To insiders, this was routine. To outsiders, it raised an unsettling question: when the same organizations design, implement and assess the machinery of government, where does independent oversight actually reside?

This pattern repeats across Western economies. From tax systems and healthcare reforms to defense procurement and AI governance, Deloitte, PwC, EY and KPMG now sit inside the control rooms of both state and market. Their formal mandate may differ — auditor, consultant, systems integrator — but their practical role increasingly converges: they operate the connective tissue of complex societies.

“The consulting industry does not just provide advice; it performs a ‘confidence trick’. By outsourcing their brains, governments are losing the ability to think for themselves, becoming ‘infantilized’ and increasingly dependent on the very firms that hollowed them out.” Mariana Mazzucato — Professor of Economics, University College London; author of The Big Con

Mazzucato’s critique captures a deeper transformation. The Big Four are no longer merely service providers; they are becoming institutional memory banks, policy translators and operational architects for governments that have shed internal expertise over decades of outsourcing and austerity. In the process, a new form of “shadow governance” has emerged — not conspiratorial, but structural.

From Bookkeepers to System Integrators

The historical image of the accountant — sleeves rolled up, ledger in hand — bears little resemblance to today’s reality. The Big Four evolved through successive waves of corporate complexity: globalization, financialization, digitization and now artificial intelligence.

Audit once defined their identity. Today, it is often the least profitable part of the business. Consulting, technology implementation, cybersecurity, data analytics and strategic advisory drive growth. In Europe, advisory services now account for roughly half of revenues, reflecting demand for digital transformation and regulatory compliance.

This transformation has a crucial implication: the firms that certify the reliability of financial statements increasingly build the systems that generate those statements. Independence, once the cornerstone of auditing, becomes harder to conceptualize in a world of integrated service lines.

The Three Axes of Power

The influence of the Big Four rests on three mutually reinforcing domains: technological infrastructure, regulatory expertise and geopolitical compliance.

1. Technological Backbone

Modern organizations run on complex digital ecosystems — cloud platforms, enterprise software, data pipelines, AI tools. Implementing and maintaining these systems requires scale, specialized knowledge and global reach. Few actors can deliver all three.

The Big Four partner with technology giants such as Microsoft, SAP, Oracle and Google to design and deploy enterprise architectures. Once embedded, these systems shape how organizations make decisions, measure performance and manage risk. In effect, the consultants who configure the software also configure the institution.

2. Gatekeepers of Compliance

Europe’s regulatory landscape has grown dense and technical: ESG reporting under the Corporate Sustainability Reporting Directive (CSRD), the AI Act, anti-money-laundering frameworks, tax transparency rules and data protection obligations. Compliance is no longer a legal afterthought; it is a core operational function.

Here, the Big Four occupy a uniquely advantageous position. They often contribute expertise to regulatory consultations and working groups, gaining early insight into emerging rules. Once legislation takes effect, companies turn to them for implementation guidance — creating a feedback loop between rulemaking and service provision.

3. Geopolitical Translators

Sanctions regimes, export controls, supply-chain realignment and cybersecurity requirements have transformed geopolitics into an operational concern for corporations. Firms operating across jurisdictions must navigate conflicting legal obligations and political risks.

The Big Four translate these macro tensions into practical compliance strategies: which markets to exit, how to restructure ownership, how to secure data flows, how to avoid secondary sanctions. In doing so, they function as private interpreters of geopolitical reality.

A Revolving Door of Expertise

Personnel flows reinforce institutional influence. Senior partners frequently transition into government roles, regulatory bodies or corporate leadership positions, while public officials move into advisory positions at consulting firms. This revolving door does not necessarily imply corruption; rather, it fosters a shared professional worldview.

Such cultural convergence can produce what political scientists call epistemic communities — networks of experts who shape policy through shared assumptions about problems and solutions. Over time, alternative perspectives may struggle to gain traction.

Too Big to Fail, Too Embedded to Replace

The collapse of Arthur Andersen after the Enron scandal demonstrated both the fragility and resilience of the auditing oligopoly. One major failure reduced the “Big Five” to four, intensifying market concentration. Today, regulators worry that losing another major firm could destabilize capital markets, as large corporations might struggle to find alternative auditors with sufficient capacity.

“The Big Four are now ‘Too Big to Fail’ and ‘Too Big to Regulate’. They have become an oligopoly that holds governments to ransom. When they fail… they face few consequences while society bears the cost.” Lord Prem Sikka — Emeritus Professor of Accounting, University of Sheffield; Member of the UK House of Lords

Sikka’s warning underscores a structural dilemma. Policymakers rely on these firms precisely because of their scale and expertise, yet that reliance makes meaningful competition and oversight difficult. Breaking them up could create operational chaos; leaving them intact risks entrenching systemic dependence.

The Algorithmic Frontier

Artificial intelligence intensifies this paradox. Organizations worldwide are racing to adopt AI for efficiency, competitiveness and strategic advantage. Implementation, however, requires governance frameworks addressing bias, transparency, cybersecurity and legal liability.

The Big Four have moved aggressively into this space, offering end-to-end services: strategy, data preparation, model deployment, risk management and assurance. In the future, they are also likely to audit AI systems for compliance with emerging regulations.

“We are creating a dangerous ecosystem. They advise companies on how to implement AI to maximize profit and later another department from the same firm checks whether that AI is ethical and safe. That is a fundamental conflict of interest we have seen before in finance.” Marcel Pheijffer — Professor of Accounting, Nyenrode Business University & Leiden University

The challenge is compounded by the opacity of modern AI. Many advanced models are proprietary “black boxes” developed by technology companies and not fully understood even by their creators. Auditing such systems may involve certifying outcomes without complete insight into underlying mechanisms — a situation reminiscent of pre-2008 credit rating practices.

Data Sovereignty and Strategic Insight

Beyond technical implementation lies a subtler dimension: information asymmetry. Through their advisory and audit roles, the Big Four gain unparalleled visibility into the operations, vulnerabilities, and strategic plans of major institutions.

“The Big Four are the new data-sovereigns. They have deeper insights into the strategic infrastructure of Western nations than many intelligence agencies.” Chris Verhoeven — Professor, Delft University of Technology (analyses on digital sovereignty)

While strict confidentiality rules govern client data, the aggregation of insight across sectors provides a panoramic view of economic systems. In a fragmented political landscape, such integrative knowledge can confer significant soft power.

The Consultantification of the Public Sector

Public administrations increasingly adopt private-sector management techniques: performance metrics, digital dashboards, outsourcing models and data-driven decision-making. Consultants often design and implement these frameworks, effectively shaping how governments define success and failure.

In sectors such as healthcare, social services and education, this shift can produce both efficiencies and unintended consequences. Quantifiable outputs may overshadow qualitative outcomes, while long-term institutional learning migrates to external providers.

Mazzucato’s critique resonates strongly here: dependence on consultants can erode internal capacity, making governments less able to act independently over time.

Why We Cannot Do Without Them

Despite concerns, the Big Four fulfill functions that few alternatives can match. Modern economies require trusted intermediaries capable of operating across borders, disciplines and regulatory regimes. Investors rely on audited financial statements; governments rely on credible implementation partners; corporations rely on integrated advisory services.

In a world of accelerating complexity, scale itself becomes a public good. The very features that provoke criticism — global reach, multidisciplinary expertise, institutional embeddedness — also enable system stability.

Toward the “Universal Assurer”

Looking ahead, the role of the Big Four may evolve into something closer to a universal certification authority. Financial statements, sustainability metrics, cybersecurity resilience, supply-chain integrity and AI safety could all fall within a single assurance ecosystem.

Such a development would formalize their status as systemic gatekeepers — organizations whose approval is required for participation in global markets. Whether this concentration enhances trust or amplifies risk will depend on regulatory oversight, competition policy and the firms’ own governance.

Conclusion: System Administrators of Society

The rise of the Big Four reflects a broader transformation in governance. As states outsource expertise and markets demand ever-greater assurance, a small set of private actors has become indispensable to the functioning of complex systems. They do not rule in the traditional sense, nor do they operate in secrecy. Instead, they maintain the infrastructure through which modern societies operate.

Seen in this light, Deloitte, PwC, EY and KPMG resemble system administrators rather than mere consultants — maintaining code, patching vulnerabilities and ensuring uptime for the institutional operating system of the West.

The central question is not whether their influence is justified, but how democratic societies can retain strategic autonomy while relying on private expertise at unprecedented scale. In the age of AI, that question will only grow more urgent.

---

Credit:
Illustration: Altair Media / AI-generated

Caption:
The Big Four — Deloitte, PwC, EY and KPMG — have evolved from audit firms into global architects of digital governance, compliance and AI transformation.