|
All Atwitter over Upcoming Changes
I'm a nut for changes. I've yet to encounter a process, product, or professional that couldn't benefit from reflection and additional refinement to how goals are achieved. I think many are eagerly (if skeptically) anticipating revisions to AS2 and the utilization of Section 404.
In a speech given by Mark Olson to the FEI "International Shaping the Future of Financial Reporting Conference" in New York, Olson restated the four goals of the PCAOB in revisiting the AS2 standard:
Since its announcement last May that I just mentioned, the PCAOB has been working hard to prepare a new standard to replace the current AS2 that will be released for public comment shortly. In undertaking this work, the PCAOB has four goals:
- First, the PCAOB plans to propose changes to make the standard simpler to read, easier to understand and more clearly scalable to companies of any size. At the same time, by emphasizing core principles, the new proposal is expected to focus auditors on the areas of greatest importance.
- Second, the PCAOB is critically evaluating every area of the audit to determine whether the existing standard encourages auditors to perform procedures that are not necessary to achieve the intended benefits of the audit.
- Third, the PCAOB plans to propose changes that would make explicit in the standard the PCAOB’s past guidance on how to make internal control audits as efficient as possible.
- Fourth, the proposal should emphasize the importance of a company’s control environment, and how it can impact the risk of financial reporting fraud or other material failure, in order to focus auditors on what really matters, which is identifying material weaknesses in a company’s system of internal control before those weaknesses result in material misstatements in the company’s published financial statements.
I'm particularly excited to see how the fourth point manifests itself in the new guidance. So much of the real value in my mind occurs in the revisiting and enforcement of entity level controls, in which organizational managment sets a very clear and visible agenda for ethical and appropriate business practices. Despite so much discussion of "risk adjusted" reviews, the current guidance has hampered the reliance on these broad control environment attributes, making them a distant second to the control activities at the very discrete process level. And this is where the expense occurs - crawling through the minutiate of a company's processes, control by control.
I can't think of a single scandal that would have been prevented by the painful and time-consuming monitoring of discrete processes in any one aspect of the business. A strong tone at the top coupled with objective, informed outsiders at the board level in most cases would have gone much further toward preventing these horrific crimes.
This isn't to say that the material weaknesses that have been uncovered should be minimized. I too take issue with improper revenue recognition, sloppy inventory management, and improperly trained personnel. I would just expect management to do a more effective job of finding this rather than external auditors. I believe that competent performance of tasks is a critical component of organizational design, and is central to the role of managing and leading.
I am guardedly optimistic that the PCAOB and SEC meetings and proposals to be released in December will begin this shift toward a more effective and efficient version of our current governance standards.
Who Cares about Fraud, Anyway?
A listserv I subscribe to recently sent this question across my email:
Who cares about fraud anyway if the shrinkage is still reported in the financial statements?
I recently had an external auditor tell me that management has a custodial duty to shareholders to protect both their assets and interests, and that he viewed his work as not only the assurance of financial accuracy, but confirmation of management's appropriate custodial duties in action.
After 10+ years in industry, working across finance and IT functions alike, I never dreamed of the weak and illogical practices occurring in the next cubicle. While I still expect the best of professionals I work with, I have adopted a "trust but verify" attitude - appropriate for SOX professionals and management alike. I expect professionalism and a personal accountability in those I work with, but SOX gives reviewers a series of specific vantage points from which to observe.
SOX is not a meaningful grade unto itself, but an indicator for the observant as to the health and maturity of an organization.
I appreciate the newly discovered tone at the top, and think that entity level controls play a larger part in good business practice than are given credit under SOX. And it is here that fraud is the significant issue: if stealing isn't the most base of crimes against another, and management is failing in their fundamental custodial duty to shareholders to detect and deter such behavior, what other tasks are being overlooked by management? Fraud gets at the agency cost of management - an indication of investor wealth that is being given away through apathy, ignorance, or laziness.
If you can't readily measure and monitor integrity, expert competence, or good judgment, it seems we are left to look to the processes by which these things are exercised.
Election Fallout
Whew.
I've been digging about a bit for details on teh implications for SOX now that the Dems have the House, and maybe even the Senate (some are repeats from past weeks, but I resubmit them collectively).
My favorite read has been not only the article, but the rants from readers at The New Republic. Clay Risen really stirred it up in this Oct 17 article, looking forward to possible implications of the election. I'm sure more will be said in the coming weeks as spectators and wonks alike start guestimating on the implications from a change in congressional composition.
One of the most promising articles I found that may give an indication for where the Dems will head was found at the Competitive Enterprise Institute, "CEI Praises Nancy Pelosi, Others For Recognizing Sarbanes-Oxley's Burden", published March 8, 2006:
The Competitive Enterprise Institute applauds the House Democrats’ Innovation Agenda for calling on Congress to take action on some of the burdens of the Sarbanes-Oxley Act of 2002.
Introduced by Rep. Nancy Pelosi (D-CA), the Agenda includes Sarbanes-Oxley reform on its “to-do” list of policies to promote innovation. It commits House Democrats to supporting legislation that would “require specifically-tailored guidelines for small public companies to ensure Sarbanes-Oxley requirements are not overly burdensome.” I've now read the Innovation Agenda (Contract with America, v2?), and don't really get what is being proposed. Maybe that's just me being slow, but it reads like non-partisan baseball and apple pie. Global competitiveness, technical research, small business innovation... all good by me.
For my $.035 cents, I just hope to see changes in control requirements that acknowledge -
- We are not all institutional investors with teams of researchers. Many investors are doing it themselves, and actually trust that the results reported are being vetted and validated.
- Accountability has to be Apparent. Love it or hate it, SOX has brought people to the table to talk about corporate and auditor responsibility. When Audit Committee members begin asking for hazard pay, you know you're onto something.
- The Act Doesn't Equal 404. There is a lot of good in the legistlation, including 404. Implementations have varied, and this costs money. But this is money that should have been invested in sound practices and processes since the requirement hit the books in the late 1970s. Now that most public companies have gotten their affairs in order, I'd rather see 404 persist. Raise the market cap if you must, but let small-cap valuation reflect the risks of shoddy practices and limited oversight mechanisms for management, BOD, and auditors to use in monitoring the business.
I'm not holding my breath on changes, but the winds are blowing. Let's just hope that Congress doesn't throw out the baby with the bathwater.
(Please forgive my compounded metaphors, I'm off coffee today).
What is Driving your CFO Agenda?
Old news for some, but I just came across a Mercer Consulting article "How CFOs Are Managing Changes in Roles and Expectations" (Feb 2006). Not a surprise for many I'm guessing, but a nice validation that others are facing the same issues.
If you thought your flavor of accountability was unique, recognize that the landscape has shifted for finance leaders. This may be a useful point of reference for up-and-coming leaders looking to recruit stronger SEC-reporting, CPA-certified professionals into their ranks.
Another point that has been recurring - stronger communicators and controls oriented professionals are going to increase in demand.
Best, tl
|
|
August 2004
September 2004
October 2004
November 2004
December 2004
April 2005
May 2005
June 2005
September 2005
October 2005
November 2005
December 2005
February 2006
May 2006
September 2006
October 2006
November 2006
December 2006
February 2007
March 2007
Sarbanes Oxley
books
Sarbanes Oxley news blog
Sarbanes Oxley discussion
|