Tag Archives: Governance

Lots Happening at the PCAOB!

Since its inception with the Sarbanes-Oxley Act the PCAOB has faced many challenges in fulfilling its responsibilities to establish GAAS for public company audits, inspect audit firms and enforce when auditors do not fulfill their responsibilities. As the PCAOB has evolved one important lesson we have all learned is that their activities and agenda do not affect just auditors. All public company reporting participants have a stake in what they do. For example, the recent audit standard about related party issues was important not just for auditors, but companies needed to assure they would have the information the new standard required auditors to obtain. Some companies even modified their D and O questionnaires in this process.

To help us be aware of where the PCAOB’s activities could impact us all, here are a few items of note going on at the PCAOB right now.

  1. Auditor’s Involvement in non-GAAP Measures

If you use non-GAAP measures in an earnings release, MD&A or other communication vehicles you will want to follow the events of the May 18-19, 2016 meeting of the PCAOB’s Standing Advisory Group. A significant part of the first day’s agenda is a discussion of “Company Performance Measures and the Role of the Auditor”. The meeting will include breakout discussion sessions and a report of the breakout discussions on day two of the meeting. You can find the agenda and how to access a webcast at:

pcaobus.org/News/Releases/Pages/SAG-meeting-agenda-May-18-19.aspx\

  1. Anticipating and Avoiding Accounting and Auditing Problems

The PCAOB inspections staff has published a “Staff Inspections Brief” which provides a preview of their observations from 2015 inspections. Interestingly the number of audit deficiencies identified for annually inspected firms, those with over 100 public clients, has decreased. For firms with less than 100 public clients, who are inspected every three years, the inspection staff found “an overall high number of audit deficiencies”. Areas with frequent deficiencies were:

Auditing internal control over financial reporting

Assessing and responding to the risk of material misstatement

Auditing accounting estimates, including fair value

Audit areas affected by economic risks, including factors such as oil prices

 

The report also discussed several financial reporting issues including business combination accounting, the statement of cash flows, revenue recognition and income taxes.

 

Auditor independence continued to be a problem area, particularly for triennially inspected firms.

You can read the whole Staff Inspection Brief at:

pcaobus.org/News/Releases/Pages/staff-inspection-brief-2015-issuer-inspections.aspx

 

  1. A Board Member’s Perspective on Inspections, Enforcement and Standard Setting

This speech, delivered by Board Member Jeanette Franzel, is a wide ranging summary of “progress in audit oversite” and has some interesting perspectives on changes that could be in store for the inspection process. She comments that inspections of large firms are showing fewer audit deficiencies but that at smaller firms there are still some that “just don’t get it”. She also provides summaries of the enforcement program and standard setting at the PCAOB.

You can read the speech at:

pcaobus.org/News/Speech/Pages/Franzel-progress-in-audit-oversight-Baruch-5-5-16.aspx

 

  1. A “Darker” Staff Practice Alert

The PCAOB inspectors continue to see enough instances of auditors making changes after audit workpapers are supposed to be “locked down” that they have issued a Staff Practice Alert to remind, or perhaps warn, auditors not to make changes inappropriately in advance of an inspection. You can read the Alert at:

pcaobus.org/News/Releases/Pages/staff-audit-practice-alert-improper-alteration-of-documents-4-21-16.aspx

Interestingly, the last section of the new release has a link to the PCAOB’s tip line……

 

  1. Re-proposed Changes to the Auditor’s Report?

The Board met on May 11, 2016 to consider re-proposing changes to the standard auditor’s report. The current pass/fail model would be retained, but the original proposal and the potentially revised proposal hope to provide additional information to make the report more relevant and informative. Stay tuned for updates on the results of the meeting; in the meantime you can read about the meeting, the revised proposal and related original proposal at:

pcaobus.org/News/Releases/Pages/PCAOB-5-11-16-open-meeting-announcement.aspx

 

  1. Naming the Audit Partner is a Done Deal and the PCAOB’s Standard Setting Agenda

 

Last, as you may have heard, the SEC has approved the PCAOB’s new Auditing Standard requiring disclosure of the names of audit partners and information about other firms involved in an audit beyond the principal auditor. To learn about that change and to see what else is on the horizon, here is a link to the PCAOB’s current rulemaking agenda:

pcaobus.org/Standards/Pages/Current_Activities_Related_to_Standards.aspx

Clearly, the PCAOB is busy!

As always, your thoughts and comments are welcome!

SEC Non-GAAP Concerns Ratchet Up

We discuss non-GAAP measures frequently in our blog. We also did a One-Hour Briefing “Non-GAAP Measures and Metrics: Getting it Right” on April 1 which you can find at:

www.pli.edu/Content/Non_GAAP_Measures_and_Metrics_Getting_it/_/N-1z10vnyZ4n?ID=282910

 

While we try to avoid being “preachy” we do see some real problems in how companies are using non-GAAP measures. Our most recent blog post about these non-GAAP measure problems is at:

seciblog.pli.edu/?p=615

 

To reinforce these issues from the SEC’s perspective Deputy Chief Accountant Wesley Bricker and OCA Chief Accountant Mark Kronforst both addressed the use of non-GAAP measures at a recent conference.

 

You can read Mr. Bricker’s speech at:

www.sec.gov/news/speech/speech-bricker-05-05-16.html

 

In his speech he outlines four major areas where the SEC believes that companies may not be using non-GAAP measures appropriately. He even makes the comment that if a company uses a non-GAAP revenue measure they can expect a comment from the staff.

While Mr. Kronforst’s speech is not on the SEC web page, he reportedly used the words “crack down” when talking about how the SEC will be reviewing the use of non-GAAP measures.

The message is clear, be thoughtful and careful with non-GAAP measures!

 

As always, your thoughts and comments are welcome!

Procrastinating about Rev Rec?

Let’s face it, almost all of us procrastinate! And when there is a good reason to procrastinate, well, that is all the better! One of the big rationales for procrastinating dealing with the new revenue recognition standard was that the FASB was definitely going to make changes to the original ASU (ASU 2014-09). As the Transition Resource Group identified and discussed issues in the new standard it became clear that the FASB would clarify certain issues and improve the standard in other areas. In fact the FASB started four discrete projects to make changes.

Yesterday that rationale came to an end.   The FASB released the fourth of the four ASU’s. They are:

 

  1. ASU 2015-14 – Revenue from Contracts with Customers (Topic 606): Deferral of the Effective Date – Issued August 2015

 

  1. ASU 2016-8 – Revenue Recognition — Principal Versus Agent Considerations (Reporting Revenue Gross Versus Net) – Issued March 2016

 

  1. ASU 2016-10 – Revenue Recognition — Identifying Performance Obligations and Licenses – Final Standard Issued in April 2016

 

  1. ASU 2016-12 – Revenue Recognition — Narrow-Scope Improvements and Practical Expedients – Issued May 2016

 

All the core issues are now in the standard as amended! And yes, the TRG and the AICPA’s Industry Task Forces will continue to work on specific issues. You can read about the TRG’s issues at:

www.fasb.org/jsp/FASB/Page/SectionPage&cid=1176164066683

 

And you can follow-up on the AICPA’s task forces at:

www.aicpa.org/InterestAreas/FRC/AccountingFinancialReporting/RevenueRecognition/Pages/RevenueRecognition.aspx

 

And, even with the TRG and AICPA still at work, the core is there. It is time to get busy!

 

As always, your thoughts and comments are welcome!

A Few Disclosure Control Reminders

In our Workshops, participants almost always have a reasonable understanding of Internal Control Over Financial Reporting (or ICFR).   And this makes sense; the concept of internal control in the financial reporting process has existed for decades. When SOX required all companies to evaluate their ICFR, the way banks had been evaluating ICFR since the FDICIA Act of 1991, it was not a brand new idea.

 

But what about controls over the preparation of information which is outside of the financial statements? Prior to SOX there was no “control” process for non-financial information. Recognizing that the non-financial information in a filing can be as important if not more important than the financial statements, SOX created a new category of controls, disclosure controls and procedures (DCP for short).

 

This post reviews some background about DCP and then we dive more deeply into four common DCP problem areas and include some example SEC comments. (If you are comfortable with the concept of DCP, you can skip to the comments at the end.)

 

The technical definition of DCP is in Exchange Act Rule 13a-15:

 

(e) For purposes of this section, the term disclosure controls and procedures means controls and other procedures of an issuer that are designed to ensure that information required to be disclosed by the issuer in the reports that it files or submits under the Act (15 U.S.C. 78a et seq.) is recorded, processed, summarized and reported, within the time periods specified in the Commission’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by an issuer in the reports that it files or submits under the Act is accumulated and communicated to the issuer’s management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

 

From this definition it is clear that DCP applies to the entire report. So, for example, in a Form 10-K, while ICFR applies to the financial statements in Item 8, DCP applies to the whole report, Items 1 through 15, including MD&A, includes a substantive portion of ICFR in the financial statements.

 

When SOX created a requirement to evaluate ICFR, it also created a requirement to evaluate DCP. Again, from Rule 13a-15:

 

(b) Each such issuer’s management must evaluate, with the participation of the issuer’s principal executive and principal financial officers, or persons performing similar functions, the effectiveness of the issuer’s disclosure controls and procedures, as of the end of each fiscal quarter, except that management must perform this evaluation:

(1) In the case of a foreign private issuer (as defined in §240.3b-4) as of the end of each fiscal year….

 

Both Form 10-K in Item 9A and Form 10-Q in Part I Item 4 refer to S-K Item 307:

 

 

  • 229.307   (Item 307) Disclosure controls and procedures.

Disclose the conclusions of the registrant’s principal executive and principal financial officers, or persons performing similar functions, regarding the effectiveness of the registrant’s disclosure controls and procedures (as defined in §240.13a-15(e) or §240.15d-15(e) of this chapter) as of the end of the period covered by the report, based on the evaluation of these controls and procedures required by paragraph (b) of §240.13a-15 or §240.15d-15 of this chapter.

[68 FR 36663, June 18, 2003]

 

One important difference between ICFR and DCP is that a newly public company does not have to report on the effectiveness of its ICFR in its first 10-K and in fact an Emerging Growth Company does not have to report on the effectiveness of its ICFR while it is an emerging growth company. But DCP must be evaluated immediately in the company’s first 10-Q or 10-K. And this evaluation must be performed each quarter.

 

DCP Problem Areas

 

Here are four common issues with some example comments about the DCP reporting process:

 

Have you documented your evaluation of DCP?

Have you said DCP are or are not effective?

Have you considered the impact of ICFR issues on DCP?

When you remediate, remember to disclose what you did.

 

Have you documented your evaluation of DCP?

 

One challenging issue in the evaluation of DCP is how much documentation is required? As a brand new concept with SOX, DCP does not have the history that ICFR has. Companies may have a Disclosure Committee, use sub-certifications, or have CEO and CFO meetings with operations managers, all of which would be part of DCP. But there is no formal “framework” for DCP and much more judgment is required. The same is true of the evaluation process. That said, it is clear it is required:

Controls and Procedures, page 105

  1. We note the disclosures under subsections (a) and (b) under this heading refer to management’s evaluations and conclusions of the effectiveness of disclosure controls and procedures and internal control over financial reporting as of and for the year December 31, 2013. In your response please confirm, if true, that company’s management performed the annual assessments as of the end of the period covered by this report, December 31, 2014. Please also provide us with the revised disclosures, with the applicable period, that includes the following:
  • the evaluations and conclusions of the principal executive and principal financial officers, regarding the effectiveness of the company’s disclosure controls and procedures as of the end of the period covered by the report, as prescribed by Item 307 of Regulation S-K; and
  • a report from management on the company’s internal control over financial reporting with the elements prescribed in Item 308(a) of Regulation S-K.

 

Have you said DCP are or are not effective?

Just as with ICFR a conclusion that DCP are or are not effective is required when they are evaluated. Note that in both the following comments the SEC is requiring the company to amend their filing:

Item 4. Controls and Procedures, page 35

  1. Based on the evaluation of disclosure controls and procedures as of June 30, 2014, your chief executive officer and chief financial officer concluded that your disclosure controls and procedures were effective as of June 30, 2014, except for the impact of material weaknesses in your internal control over financial reporting. We believe that Item 307 of Regulation S-K requires your officers to conclude if your disclosure controls and procedures are “effective.” We do not believe it is appropriate for your officers to conclude that your disclosure controls and procedures are effective “except for” certain identified problems. Your officers must definitively conclude whether your disclosure controls and procedures are effective or ineffective. Your officers should consider the identified problems in determining if your disclosure controls and procedures are effective. If your officers conclude your disclosure controls and procedures are effective, please disclose the basis for their conclusion in light of these material weaknesses. If you determine that your disclosure controls and procedures were ineffective as of June 30, 2014 when considering these identified problems, please amend your Form 10-Q for the period ended June 30, 2014 to include your revised assessment of your disclosure controls and procedures.

 

  1. In the first paragraph of this section, you disclose that your disclosure controls and procedures were adequate. Meanwhile, in the second paragraph of this section, you disclose that your disclosure controls and procedures were not effective. In an amendment to your Form 10-K, please revise to disclose your conclusion that your disclosure controls and procedures are effective or ineffective, whichever the case may be. Refer to Item 307 of Regulation S-K.

 

Have you considered the impact of ICFR issues on DCP?

 

As described above DCP includes ICFR as a subset of DCP.   This means that if a company has a material weakness in ICFR it likely also impacts on DCP.

Item 4. Controls and Procedures, page 21

  1. As reported in your Form 10-K for the year ended July 31, 2015, management identified material weaknesses in internal controls over financial reporting, and you disclose that your remediation of the material weaknesses in your internal control over financial reporting is ongoing. Given this, please tell us the factors that management considered in concluding that disclosure controls and procedures were effective for the period.

When you remediate, remember to disclose what you did.

Lastly, just as with ICFR, when you remediate a problem area, be sure to appropriately disclose what you did to fix a control problem

Evaluation of Disclosure Controls and Procedures, page 7

  1. We note that you conclude that your disclosure controls and procedures were not effective on June 30, 2015. Please expand your disclosures to clearly discuss the material weakness identified, when it was discovered and your plans to remediate it.
  2. We note your conclusion indicating that your disclosure controls and procedures were not effective as of your June 30, 2015 fiscal year end due. Further, we note your management concluded that disclosure controls and procedures in your Form 10-Q filed on November 16, 2015 were effective and there were no changes in your internal control over financial reporting during the quarter ended September 30, 2015. Please revise to expand your disclosures to explain how management determined that its disclosure controls and procedures were effective at September 30, 2015 given that the company concluded that they were ineffective at year end. In this regard, tell us and disclose how you remediated the material weakness that caused you to conclude that your disclosure controls and procedures were not effective at June 30, 2015. Also, please revise your disclosures to comply with Item 308(c) of Regulation S-K to include details of any changes that may have materially affected or are reasonably likely to materially affect the company ́s internal control over financial reporting.

 

As always, your thoughts and comments are welcome!

A non-GAAP Measure Subtle Trap

One of the more complex traps when presenting non-GAAP measures is this question:

Which source of SEC non-GAAP measure guidance applies to your earnings release:

Reg G, or

S-K Item 10(e)?

In case you are not familiar with Reg G and S-K Item 10(e) and when each of them applies:

Reg G applies when you use a non-GAAP measure in a non-filed source, and

S-K Item 10(e) applies when you use a non-GAAP measure in a filed document.

You can learn more about these two non-GAAP rules in some of the earlier posts on our blog. Here is a post with the basics:

 

seciblog.pli.edu/?p=401

 

You can also check out our one-hour briefing about non-GAAP measures from March 2016 at:

www.pli.edu/Content/Non_GAAP_Measures_and_Metrics_Getting_it/_/N-1z10vnyZ4n?ID=282910

 

The trap here is this: You might believe that since an earnings release is not a filed document Reg G is the applicable guidance, and all you have to do is present the most directly comparable GAAP measure and provide a reconciliation.

That is NOT the case. The reason that S-K Item 10(e) applies to your earnings release is actually very subtle. It is in the instructions to Form 8-K. Tucked away in the earnings release 8-K, Item 2.02, is this instruction:

 

  1. The requirements of paragraph (e)(1)(i) of Item 10 of Regulation S-K (17 CFR 229.10(e)(1)(i)) shall apply to disclosures under this Item 2.02.

 

Thus, the first part of S-K Item 10(e) DOES apply to your earnings release, even though it is not “filed” and even though the Item 2.02 8-K is not a filed document!

 

So, to be very detailed, this part of S-K Item 10(e) applies to year earnings release (there are other requirements in S-K Item 10(e) that do not apply, we won’t list them here):

 

(e) Use of non-GAAP financial measures in Commission filings. (1) Whenever one or more non-GAAP financial measures are included in a filing with the Commission:

 

(i) The registrant must include the following in the filing:

(A) A presentation, with equal or greater prominence, of the most directly comparable financial measure or measures calculated and presented in accordance with Generally Accepted Accounting Principles (GAAP);

 

(B) A reconciliation (by schedule or other clearly understandable method), which shall be quantitative for historical non-GAAP measures presented, and quantitative, to the extent available without unreasonable efforts, for forward-looking information, of the differences between the non-GAAP financial measure disclosed or released with the most directly comparable financial measure or measures calculated and presented in accordance with GAAP identified in paragraph (e)(1)(i)(A) of this section;

 

(C) A statement disclosing the reasons why the registrant’s management believes that presentation of the non-GAAP financial measure provides useful information to investors regarding the registrant’s financial condition and results of operations; and

 

(D) To the extent material, a statement disclosing the additional purposes, if any, for which the registrant’s management uses the non-GAAP financial measure that are not disclosed pursuant to paragraph (e)(1)(i)(C) of this section; and

 

One area the staff will comment on is the “equal or greater prominence” requirement in paragraph (A) above. Here is an example comment:

 

  1. We note that in the Financial Highlights section of your press release furnished on Form 8-K, you disclose Total Segment EBITDA, a non-GAAP financial measure, without the disclosure of the most comparable GAAP measure. Please note that under Item 10(e)(1)(i)(A) when a non-GAAP financial measure is presented, the most directly comparable financial measure calculated in accordance with GAAP must be disclosed with equal or greater prominence. Please revise accordingly. See also Instruction 2 to Item 2.02 of Form 8-K.

 

As always, your thoughts and comments are welcome!

 

 

Comment of the Week – Market Risk Reminder

 

We have been discussing the topic of Market Risk Disclosures a lot in this environment of volatile exchange rates, bumpy commodity prices and uncertain interest rates. This disclosure is one of the most confusing parts of Regulation S-K. Without going into a whole lot of details about S-K Item 305 (which we covered in an earlier blog at seciblog.pli.edu/?p=489), as we move towards the end of the first quarter it will continue to be important to focus on getting this disclosure right.

 

So, with this post as a reminder, here is a quick example in a recent comment:

Item7A. Quantitative and Qualitative Disclosures About Market Risk, page 63

  1. Please provide an analysis on whether your “cash flow hedges,” discussed in the second- to-last paragraph of page 63, are material, such that you would need to provide the disclosure in Item 305(a) of Regulation S-K. Please see General Instruction 5.B to Item 305(a) and (b).

 

As usual, your thoughts and comments are welcome!

Conflict Minerals – More Help!

 

In our Form 10-K Tune-Up this year we addressed conflict mineral reporting developments. We did a deeper discussion with links to several supporting documents in this post:

seciblog.pli.edu/?p=565

 

If you are searching for more help and information as you prepare Form SD, PLI is presenting a One-Hour Briefing focused on this evolving reporting requirement. Topics to be addressed include:

The latest on the legal challenge to SEC rule

Updates on pending legislation in the EU and the U.S.

Tips for drafting your conflict minerals report for 2015

Best practices for 2016 due diligence planning and compliance trends

Guidance for preparing audit documentation

Overview of risks associated with supply chain disclosure

 

All of this is even more important as NGO’s focus more and more on these reports.

You can read more about the One-Hour Briefing and sign-up at:

www.pli.edu/Content/Seminar/Conflict_Minerals_Preparing_for_Your_Filing/_/N-4kZ1z10u15?fromsearch=false&ID=281215

 

 

As always your thoughts and comments are welcome!

 

PS You can review the Form 10-K Tune-up Briefing and obtain CLE and CPE credit at:

www.pli.edu/Content/OnDemand/Second_Annual_Form_10_K_Tune_Up/_/N-4nZ1z116ku?fromsearch=false&ID=278540

 

Form 10-K Tip Eight – Conflict Minerals and Form SD Disclosure

 

In our One-Hour Briefing presenting our thoughts on key issues for 2016 Form 10-K’s we discussed Conflict Mineral Reporting. Companies need to continue to refine their reporting processes as they gain experience with the rule and also watch for developments in the continuing legal challenges to the rule.

 

The short and sweet news here is that not a lot has changed since last year. That said, since this is a calendar year reporting requirement for all companies with a May 31 due date, there is time for change to occur before the due date.

 

One are that is not different is that because of the April 2014 court decision, issuers are still not required to report whether any of their products have “not been found to be DRC conflict free”.  You can review the SEC Order for the Partial Stay of the rule at:

www.sec.gov/rules/other/2014/34-72079.pdf

 

 

Corp Fin issued a Statement about the Court of Appeals decision which is at:

www.sec.gov/News/PublicStmt/Detail/PublicStmt/1370541681994

 

 

And there are SEC FAQ’s available at:

www.sec.gov/divisions/corpfin/guidance/conflictminerals-faq.htm

 

The FAQ’s do provide some process guidance, but the bottom line is that this area is still evolving.

 

As always, your thoughts and comments are welcome!

 

 

 

PS You can review the Form 10-K Tune-up Briefing and obtain CLE and CPE credit at:

www.pli.edu/Content/OnDemand/Second_Annual_Form_10_K_Tune_Up/_/N-4nZ1z116ku?fromsearch=false&ID=278540

 

Climate Change – An MD&A Heads-Up

In our One-Hour Briefing discussing MD&A Hot Topics on February 8, 2016 we included climate change disclosures as one of the SEC’s current focus areas. We reviewed the SEC’s climate change disclosure guidance in FR 82 along with current developments in this area, including example SEC comments. This is clearly a very challenging uncertainty to deal with for many companies.  You can find FR 82 at:

www.sec.gov/rules/interp/2010/33-9106.pdf

 

If you are in an industry that is faced with this disclosure issue, WilmarHale’s Energy, Environment and Natural Resources Practice is in the process of presenting an eight-week series into this and other challenges facing the energy sector. You can read their thoughts about climate change disclosures and find the other posts in their blog at:

www.wilmerhale.com/pages/publicationsandnewsdetail.aspx?NewsPubId=17179880687

 

First Annual Dealing with MD&A Hot Topics.  Link to our one hour briefing by using the link below:

http://www.pli.edu/Content/First_Annual_Dealing_with_MDA_Hot_Topics/_/N-1z10wp5Z4n?ID=280193

 

Hope this helps, and as always your thoughts and comments are welcome!

10-K Tip Number Seven for 2016 – Cybersecurity

 

Is there a hotter disclosure topic than cybersecurity in the SEC reporting world right now? That of course is why we included it as a hot topic on our 2016 Form 10-K Tune-Up (Which is now available on-demand with CLE and CPE credit at:

www.pli.edu/Content/OnDemand/Second_Annual_Form_10_K_Tune_Up/_/N-4nZ1z116ku?fromsearch=false&ID=278540   )

 

As perhaps the most important cybersecurity 10-K drafting reminder, don’t forget to review Corp Fin Disclosure Guidance Topic 2 as you draft and review. The Disclosure Guidance Topic is at:

www.sec.gov/divisions/corpfin/guidance/cfguidance-topic2.htm

 

And, for some examples and other thoughts, we have done a number of posts in our blog about cybersecurity. You can review them at:

Cybersecurity – What the what??

seciblog.pli.edu/?p=318

 

Comment of the Week Cybersecurity Risks Galore

seciblog.pli.edu/?p=253

 

Cybersecurity – The Continuing Saga

seciblog.pli.edu/?p=225

 

 

Cybersecurity – Help Managing the Risk

seciblog.pli.edu/?p=436

 

 

As always, your thoughts and comments are welcome!