Types of Financial Statements: Preparations vs. Compilations

Your business needs financial statements so management can monitor performance, attract investment capital and borrow money from a bank or other lender. But not all financial statements are created equal. Audited statements are considered the “gold standard” in financial reporting. While public companies are required to issue audited statements, smaller, privately held organizations have options. CPAs provide three other types of financial statements, which, in order of descending level of diligence, are: reviews, compilations and preparations.

Here’s some insight into the newest and most basic financial reporting service available to private businesses — preparations — and how these engagements differ from compilations.

Preparations

Financial statement preparations are often created as part of bookkeeping or tax-related work. While some lenders may accept preparations in support of small lending arrangements, preparations are generally reserved for internal purposes to provide information on the business’s current financial condition and as a basis of comparison against future accounting periods.

Preparations provide no assurance regarding the accuracy and completeness of the financial statements. Assurance is critical if you plan to share the financial statements with third parties. Generally speaking, the greater the level of assurance, the more trust a reader will have in the accuracy and integrity of your company’s financial statements.

In addition, professional standards don’t require CPAs to be independent of a business when preparing its financial statements. In other words, it’s OK for an accountant to have a financial interest in a company that he or she prepares financial statements for.

To avoid misleading any third parties who might receive a copy of these statements, each page of a prepared financial statement must include a disclaimer or legend stating that no CPA provides any assurance on the financial statements. In addition, prepared financial statements must adequately refer to or describe the applicable financial reporting framework that’s used and disclose any known departures from that framework.

Compilations

Like preparations, compilations provide no assurance that the financial statements are accurate and complete. And independence isn’t required when issuing compiled financial statements. But there are subtle differences when moving from a preparation to a compilation.

A compilation involves the assurance of a formal report by a CPA who’s required to read the statements and evaluate whether they’re free from obvious material errors. The CPA’s report appears on the first page, before the financial statements. If the CPA isn’t independent of the business, he or she must disclose this fact in the report.

Notably, the use of a compilation of financial statements can extend beyond the business owner to third parties, including investors, business partners and lenders who may view the input of a CPA as beneficial.

Building for the Future

Preparations may be a cost-effective way for small business owners to monitor performance. But they provide limited usefulness as a business grows and needs to interact with third parties. Eventually, prepared statements may need to be upgraded to a compilation, review or audit to give stakeholders greater assurance about the company’s financial results. Contact us to determine which type of financial statement is right for your current situation.

© 2023

How Manufacturers Can Attract and Retain Employees in 2023

For years, manufacturers have had an increasingly difficult time finding, attracting, and retaining skilled laborers. In the wake of the COVID-19 pandemic, these concerns have become even more pressing. A recent Reuters article notes that while the manufacturing industry continues to bounce back from pandemic uncertainties and demand slowdowns, potential growth is being limited by a continued labor shortage despite a record number of job openings.

This labor shortage is worsening an already fractured supply chain, as the shipping and warehousing industry has been hit particularly hard by the ‘Great Resignation’, which has seen a record number of workers leave their jobs in the midst of the pandemic. In a recent survey by the US Chamber of Commerce, over 90% of state and local chambers identify labor shortages as a factor limiting economic growth.

But in the face of so much economic uncertainty, what can be done to ease these concerns?

Retain current employees

Retaining existing employees is more efficient and cost effective than hiring new employees. The Society for Human Resource Management (SHRM) estimates the average cost to replace an employee at up to 6-9 months of their salary in recruiting and training costs, which can cost the overall U.S. economy over a trillion dollars per year. Understanding why employees leave, and perhaps even more importantly why they stay, can be vital for an organization to understand where their strengths are, and where any shortfalls may lie.

Attracting more, and different kinds, of workers

A potential solution to the mismatch between available positions and finding workers willing and able to fulfill them might lie in expanding a company’s understanding of what is considered as the available pool of workers. One creative strategy noted by Brooke Sutherland in a recent Bloomberg article highlights the benefits of broadening such definitions of available workers. This can include revamping the company’s public image to appeal more widely to a younger audience base, expanding the use of government assisted training programs to help promote investment in a workforce, and working to move past the social stigma surrounding hiring certain individuals such as those with a previous criminal record.

Outsourcing tasks, or even entire positions

If the pandemic has shown us nothing else, as we were ‘sheltered-in-place’ throughout much of 2020 and beyond, companies have been able to see how many jobs are able to be performed from home – a home that can be located anywhere with a stable internet connection. Recruitment efforts for many increasingly computer dependent positions, particularly as more and more companies are able to operate in cloud-based environments, are no longer required to be tied to a company’s physical location.

Through utilizing professional employer organizations (PEO’s), recruitment efforts can be expanded internationally based on the needs of a business, regardless of where potential candidates may be located. While it is true that it is certainly easier to outsource some jobs more than others, where efficiencies can be gained, expanding these perspectives can offer invaluable insights. Particularly where professional services are concerned, many firms offer a sliding scale of support from part time assistance with data entry or customer collections and vendor payments, to fully outsourced controller services and other types of executive management assistance.

Building a strong workforce goes a long way

In these unprecedented times, there has never been a better opportunity for unique and vast changes to occur. With so much uncertainty surrounding daily life, it can feel like too big of a risk to enter any additional unknowns into the equation, but that is exactly why those risks must be taken. A company’s workforce can be the greatest reason behind its success or its largest liability leading to its failure. The difference between the two lies in a willingness to think outside the box, open new doors, and redefine what a modern-day workforce may entail.

Need More Support? Contact us for more information.

3 Tips for Boosting the Value of Your SOX 404(a) Compliance

Beyond regulatory requirements, developing an effective internal controls framework is valuable in helping your company manage risk.

Identifying and mitigating the company’s financial and operational risks under the Sarbanes Oxley Act’s (SOX) Section 404 requirements can also be a prudent investment in improving efficiency by aligning management’s priorities with the organization’s internal processes and operations.

3 Tips for Getting the Most Out of SOX Compliance

1.      Understand Your Obligations (SOX 404a vs 404b)

One of the keys to successful SOX compliance is understanding whether your company falls under the reporting requirements of 404 Section (a) or Section (b). While management must certify the effectiveness of its internal controls in either case, Section (b) adds the requirement (based on the company’s capitalization and revenue) for your external auditor to attest to that effectiveness.

In practice, we often see companies that are not required to file under Section (b) scale back their compliance efforts by trimming assessments to the bare bones and eliminating internal testing — yet continuing to issue certifications.

This may seem like a cost-savings move, but the company may run into significant deficiencies and material weaknesses that are discovered during the year-end external audit. This, in turn, leads to additional remediation steps that must be implemented quickly. More importantly, these deficiencies can reduce confidence in the quality of the company’s financial reporting and internal controls from auditors, the board, and potentially investors.

Taking the time to develop an effective compliance framework and culture helps your company manage risk more effectively while also satisfying your regulatory obligations.

2.      Focused Attention

It’s critical for your company’s management to identify the most important risks to the quality and accuracy of your financial statements, and to focus attention and resources on the areas that represent the most important risk.

The COSO Enterprise Risk Management – Integrated Framework offers a good starting point for developing an effective internal controls system. The framework offers 17 principles embedded within five components outlining your controls environment, risk assessment, control activities, and other key aspects.

To learn more, you can view a recording of our webinar, Navigating SOX 404a Compliance.

Similarly, it’s helpful to understand that, over time, the company’s risk profile is going to evolve in response to market conditions as well as organizational changes. Part of an effective risk assessment strategy is understanding those changes, the potential impacts on the company, and the processes and controls that must be adjusted as a result.

3.      Build a Compliance Culture

Optimizing the value of your SOX investment, like your compliance effort, also depends on management setting an effective tone highlighting the importance of risk management and ethical behavior.

Management needs to stress the importance of compliance and risk management company-wide, and to back up those statements with internal training and quarterly check-ins to ensure management identifies and controls its most important financial statement risks.

Department leaders also need to understand that compliance isn’t a once-and-done or periodic activity, but rather an ongoing process of identifying risk, establishing effective controls, testing those controls, and making necessary corrections.

An effective compliance culture will improve risk management and cost savings by helping the company minimize last-minute surprises with its audit committee and auditors.

In addition, management can focus on the most direct risk to its financials, create appropriate controls, and produce the high-quality financial data the organization needs for external and internal reporting.

Getting Help With SOX 404a Compliance

Whether you’re looking to establish, enhance, or outsource your internal audit function, we provide ‘right-sized’ audit support to assist you. For more information about optimizing the value of your SOX investment, reach out to our team.

From Zero to SOX Implementation: Sarbanes-Oxley Compliance

The process of building a sustainable, comprehensive internal control environment sufficient to comply with the Sarbanes-Oxley act of 2002 (SOX) requires a significant investment of organizational resources. We have created the Zero to SOX implementation process to assist organizations in this endeavor.

A Five-Year Window for SOX Internal Control Audit Requirements

On March 12, 2020, the SEC issued a ruling – Amendments to the Accelerated Filer and Large Accelerated Filer Definitions.  The effect of the changes was to reduce the burden and compliance costs for certain smaller registrants.  Under the new rules, certain low-revenue registrants no longer are required to have their assessment of the effectiveness of internal control over financial reporting (ICFR) attested and reported on by their independent auditors. The figure below from the U.S. Securities and Exchange Commission shows a detail of thresholds between Small Reporting Companies (SRCs) and Non-SRC organizations.

While the burden may have been lifted for smaller organizations, the requirement of a comprehensive internal control environment remain. An emerging growth company’s annual report still must contain an internal control report which:

  • states management’s responsibility for establishing and maintaining an adequate internal control structure and procedures for financial reporting; and
  • contains an assessment, as of the end of the company’s most recent fiscal year, of the effectiveness of the company’s internal control structure and procedures for financial reporting.

During the five years following an IPO, a Small Reporting Company should take a risk-focused approach to SOX compliance by specifically identifying, implementing and monitoring those internal controls that enable management to achieve these regulatory requirements with confidence.

ZERO to SOX – A Five Year Timeline

Year One Pre-SOX

Activities in the first post-IPO year are focused upon the identification of HIGH Risk processes and the implementation of the documentation and monitoring activities necessary to support management’s annual reporting requirements under Section 404.

Years Two and Three Pre-SOX

Activities in the second and third post- IPO year are focused upon evaluating and understanding the company’s internal control priorities in light of the company’s growth and evolution.  Monitoring activities necessary to support management’s annual reporting requirements under Section 404 continue.

Year Four Pre-SOX

Activities in the fourth post-IPO year add the additional objective of documentation and assessment of the MODERATE and LOW risk processes.

Evaluating and understanding the company’s internal control priorities in light of the company’s growth and evolution continues along with monitoring activities necessary to support management’s annual reporting requirements under Section 404.

Year Five SOX

Activities in the fifth post-IPO year are focused upon the monitoring activities necessary to support management’s annual reporting requirements under Section 404 continue and those necessary to support the integrated audit work of the company’s external auditors.

Our SOX Services Helps Set Your Company Up for Long-term Compliancy

The Zero to SOX process designed with clearly defined goals, executed by experienced team members will lay the foundation to meet your company’s regulatory compliance requirements as well as practice effective corporate governance now and into the future.

For more information on our SOX Services, contact our team.

Are You at Risk? 7 Common SOX 404 Compliance Challenges to Avoid

Several SOX challenges can affect a company’s ability to maintain an effective controls framework, or potentially hinder its ability to demonstrate that its ICFR efforts serve their intended purpose.

Common SOX Challenges

1. A lack of executive or board support for the organization’s SOX program.

Management’s commitment to effective controls and financial reporting is a key component to a SOX effort receiving the required time and attention.

2. Failing to take a true risk-based approach.

It’s essential to understand the company’s risks and to design controls to mitigate those risks, rather than treating SOX as a check-the-box compliance exercise.

3. Over-engineering process documentation.

Concise documentation that helps staff members and external auditors understand the thinking underlying a process is more effective than trying to capture every potential contingency and nuance (which can divert attention from more important activities).

4. Confusing operational controls with financial reporting controls.

Along with ensuring the data is accurate, you need to verify that the process used to generate that data is operating effectively.

5. Infrequent and superficial coordination with external auditors.

Management and external auditors should understand the company’s risks to evaluate better the design and the effectiveness of the controls designed to mitigate those risks. Nobody should be surprised during the audit process.

6. Having control owners believe control ownership is separate from day-to-day activities.

This is typically a culture issue, but team members responsible for controls may not integrate risk and performance of controls as part of their typical activities.

7. Underutilizing IT and application automation and configurations.

Control activities performed manually, on a repetitive basis come with a greater cost and increased risk of error, when compared to automated controls.

Understanding the requirements of SOX 404(a) and 404(b) and communicating frequently with external auditors about the design and performance of your controls are cornerstones of effective risk management and SOX compliance. Knowing these SOX challenges can help a company with its compliance journey.

For questions or more information about SOX compliance, visit our SOX services page or contact our team.

Independent Assurance Inspires Confidence in Sustainability Reports During COVID-19

Sustainability reports explain the impact of an organization’s activities on the economy, environment, and society. During the novel coronavirus (COVID-19) pandemic, stakeholders continue to expect robust, transparent sustainability reporting, with a stronger emphasis on the social and economic impacts of the company’s current operations than on environmental matters.

Investors, lenders, and even the public at large may pressure companies to issue these supplemental reports. But the information they provide isn’t based on U.S. Generally Accepted Accounting Principles (GAAP). So, is it worth the time and effort? One way to make your company’s report more meaningful and reliable is to obtain an external audit of it.

What Is a Sustainability Report?

A sustainability report generally focuses on a company’s values and commitment to operating sustainably. It provides a mechanism for communicating sustainability goals and how the company plans to meet them. The report also guides management when evaluating corporate actions and their impact on the economy, environment, and society.

During the COVID-19 crisis, stakeholders want to know how your company handles issues such as public health and safety, supply chain disruptions, strategic resilience, and human resources. For example:

  • How is the company treating employees during the crisis?
  • Are workers being laid off or furloughed — or is management implementing executive pay cuts to retain its workforce?
  • What is the company doing to ensure its facilities are safe for workers and customers?
  • Is the company donating to charities and encouraging employees to participate in philanthropic activities during the crisis, such as volunteering at food pantries and donating blood?

Stakeholders want assurance that companies are engaged in responsible corporate governance in their COVID-19 responses. Sustainability reports can showcase good corporate citizenship during these challenging times.

Why Do You Need an External Audit?

There aren’t currently any mandatory attestation requirements for sustainability reporting. That means companies can produce reports without engaging an external auditor to review the document for its accuracy and integrity. However, without independent, external oversight, stakeholders may view sustainability reports with a significant degree of skepticism. That’s where audits come into play.

Many organizations have developed standardized sustainability frameworks, including the:

  • Carbon Disclosure Project (CDP),
  • Dow Jones Sustainability Index (DJSI),
  • Global Initiative for Sustainability Ratings (GISR),
  • Global Reporting Initiative (GRI),
  • International Integrated Reporting Council (IIRC),
  • Sustainability Accounting Standards Board (SASB), and
  • United Nations Sustainable Development Goals (SDG).

External auditors can verify whether sustainability reports meet the appropriate standards and, if not, adjust them accordingly. In addition, numerous attestation standards govern the audit of a sustainability report, including those from the American Institute of Certified Public Accountants, the International Standard on Assurance Engagements, and the International Organization for Standardization.

Need Help?

Many companies agree that a sustainability report is important to their communications with stakeholders. But there’s little consensus on the approach, topics, or non-GAAP metrics that should appear in sustainability reports. We understand the standards that apply to these supplemental reports and can help you report sustainability matters in a reliable, transparent manner. Contact us today to speak to one of our industry professionals.

Background of Financial Restatements

In the first half of 2021, there was a surge in restating financial statements. The reason relates to guidance issued by the Securities and Exchange Commission, requiring special purpose acquisition companies (SPACs) to report warrants as liabilities. SPACs are shell corporations listed on a stock exchange to acquire a private company, making it public without going through the traditional IPO process. Historically, SPACs that offer warrants (which allow investors buy shares at a set price in the future) have reported those instruments as equity.

In this situation, most SPAC investors understood that these restatements were related to a financial reporting technicality that applied to the sector, rather than problems with a particular company or transaction. But some restatements aren’t so innocuous.

What are restated financial statements?

The Financial Accounting Standards Board (FASB) defines a restatement as revising a previously issued financial statement to correct an error. Businesses may reissue their financial statements for several “mundane” reasons, whether publicly traded or privately held. Like the recent situation with SPACs, managers might have misinterpreted the accounting standards or made minor mistakes and need to correct them.

Leading causes for restatements

  • Recognition errors (for example, when accounting for leases or reporting compensation expense from backdated stock options),
  • Income statement and balance sheet misclassifications (for instance, a company may need to shift cash flows between investing, financing and operating on the statement of cash flows),
  • Mistakes in reporting equity transactions (such as improper accounting for business combinations and convertible securities),
  • Valuation errors related to common stock issuances,
  • Preferred stock errors, and
  • The complex rules related to acquisitions, investments, revenue recognition, and tax accounting.

Example of reasons to restate results

Often, restatements happen when the company’s financial statements are subjected to higher scrutiny. For example, restatements may occur when a private company converts from compiled financial statements to audited financial statements, decide to file for an initial public offering — or merges with a SPAC. Restatements also may be needed when the owner brings in additional internal (or external) accounting expertise, such as a new controller or audit firm.

In some cases, financial restatements also can be a sign of incompetence, weak internal controls — or even fraud. Such restatements may signal problems that require corrective actions.

Communication is key

The restatement process can be time-consuming and costly. Regular communication with interested parties — including lenders and investors — can help businesses overcome the negative stigma associated with restatements. Management must also reassure stakeholders that the company is financially sound to ensure their continued support.

We can help with your financial restatements

We can help accounting personnel understand the evolving accounting and tax rules to minimize the risk of financial restatements. We can also help them effectively manage the restatement process and take corrective actions to minimize the risk of financial restatements going forward.

© 2023

It’s Important to Monitor your SEC Filing Status

As public companies grow, they may move from one filing status or issuer category to another. Recent and proposed changes to the Securities and Exchange Commission (SEC) rules for some categories could affect your company’s financial reporting and audit procedures.

Categories of public companies

Under existing rules, public companies fall into different SEC filing status categories, based on their public “float” (the amount of shares available to the public for trading):

  • Smaller reporting companies (SRCs) are nonaccelerated filers that meet certain other requirements, including annual revenues under $50 million if their public float is zero.
  • Nonaccelerated filers have a public float of less than $75 million and aren’t otherwise required to accelerate their filing deadlines.
  • Accelerated filers have a public float between $75 million and $700 million and meet other requirements.
  • Large accelerated filers have a public float of more than $700 million and meet certain other requirements.

Emerging growth company

What is an emerging growth company (EGC)? Generally, an EGC is a new public company that has gross revenues under $1 billion in its most recent fiscal year and meets certain other requirements. EGCs enjoy a variety of benefits during their first five years of existence, including scaled-back disclosures and exemption from the auditor attestation of a company’s internal control over financial reporting as required by Section 404(b) of the Sarbanes-Oxley Act.

A company that ceases to be an EGC must begin complying with Sec. 404(b), except for nonaccelerated filers, which are exempt from that requirement unless they become accelerated or large accelerated filers. (Congress currently is considering legislation that would extend the exemption for certain companies, however.)

Changes to public float thresholds

On June 28, 2018, the SEC voted unanimously to issue the final rule in Release No. 33-10513, Amendments to Smaller Reporting Company Definition. The rule increases the public float threshold for SRCs to $100 million and nonaccelerated filers to $250 million.

To complicate matters, the SEC did not make conforming changes to the definition of an accelerated filer. Rather, it eliminated the automatic exclusion of SRCs in the definitions of accelerated and large accelerated filers. As a result, a registrant could be both an SRC and an accelerated filer. As an accelerated filer, a company would still be required to comply with Sec. 404(b).

The new SEC rule will be effective 60 days after publication in the Federal Register, which normally occurs a few weeks after a rule is posted on the SEC’s website. The SEC said 966 additional companies will be eligible for smaller company status in the first year of the new threshold.

Annual assessment of your SEC filing status

Changes in filing status affect the form, content and timing of financial reports, as well as the extent of external audit procedures. So, it’s a good idea to re-evaluate your company’s status well before the end of each fiscal year. We can help you evaluate your filing status based on the SEC’s evolving guidelines. If a change is anticipated, we can help you prepare for new filing, disclosure and audit requirements. Contact us for more information on SEC filing status.

© 2023

Have You Followed Up On The Management Letter From Your Audit Team?

Auditors typically deliver financial statements to calendar-year businesses in the spring. A useful tool that accompanies the annual report is the management letter. It may provide suggestions — based on industry best practices — on how to fortify internal control systems, streamline operations and reduce expenses.

Managers generally appreciate the suggestions found in management letters. But, realistically, they may not have time to implement those suggestions, because they’re focusing on daily business operations. Don’t let this happen at your company!

What does a management letter address?

A management letter may address a broad range of topics, including segregation of duties, account reconciliations, physical asset security, credit policies, employee performance, safety, internet use, and expense reduction. In general, the write-up for each deficiency includes the following elements:

Observation

The auditor describes the condition, identifies the cause (if possible) and explains why it needs improvement.

Impact

This section quantifies the problem’s potential monetary effects and identifies any qualitative effects, such as decreased employee morale or delayed financial reporting.

Recommendation

Here, the auditor suggests a solution or lists alternative approaches if the appropriate course of action is unclear.

Some letters present deficiencies in order of significance or the potential for cost reduction. Others organize comments based on functional area or location.

What elements are required in a management letter?

AICPA standards specifically require auditors to communicate two types of internal control deficiencies to management in writing:

1. Material weaknesses. These are defined as “a deficiency, or combination of deficiencies, in internal control, such that there is a reasonable possibility that a material misstatement of the organization’s financial statements will not be prevented or detected and corrected on a timely basis.”

2. Significant deficiencies. These are “less severe than a material weakness, yet important enough to merit attention by those charged with governance.”

Operating inefficiencies and other deficiencies in internal control systems aren’t necessarily required to be communicated in writing. However, most auditors include these less significant items in their management letters to inform their clients about risks and opportunities to improve operations.

Have you improved over time?

When you review last year’s management letter, consider comparing it to the letters you received for 2019 (and earlier). Often, the same items recur year after year. Comparing consecutive management letters can help track the results over time. But, be aware: Certain issues may autocorrect — or worsen — based on factors outside of management’s control, such as changes in technology or external market conditions. If you’re unsure how to implement a particular suggestion from your management letter, reach out to your audit team for more information.

© 2023

Analytical Software Tools for Auditing

Analytical software tools will never fully replace auditors, but they can help auditors do their work more efficiently and effectively. Here’s an overview of how data analytics — such as outlier detection, regression analysis and semantic modeling — can enhance the audit process.

Auditors bring experience and professional skepticism

When it’s appropriate, instead of manually testing a representative data sample, auditors can use analytical software tools to compare an entire data population against selected criteria. This process quickly identifies anomalies hidden in large amounts of data that can be tagged for further examination by auditors during fieldwork. Analytical software tools can test various kinds of data, including accounting, internal communications and documents, and external benchmarking data.

If unusual transactions or trends are found, auditors will investigate them further using the following procedures:

  • Interviewing management about what happened and why,
  • Conducting external research online and from industry publications to independently understand what happened or to verify management’s explanation, and
  • Performing additional manual testing procedures to determine the nature of the anomaly or exception.

In addition, confirmations and representation letters from attorneys, customers and other external parties may corroborate what management says and external research reveals.

Audit findings may require action

Often, auditors conclude that irregularities have reasonable explanations. For instance, they may be due to an unexpected change in the company’s operations or external market conditions. If a change is expected to continue, it may alter the auditor’s expectations about the company’s operations going forward. Sometimes, a change discovered while auditing one part of the financials may affect audit procedures (including analytics) that will be performed on other accounts.

Alternatively, auditors may attribute some irregularities to inadvertent mistakes or intentional fraud schemes. Auditors usually communicate with the audit committee or the company’s owners as soon as possible if they discover any material errors or fraud. These irregularities might require adjustments to the financial statements. The company also might need to take action to mitigate financial losses and prevent the problem from recurring.

For example, the controller may need additional training on recent changes to the tax and accounting rules. Or management may need to implement additional internal control procedures to safeguard against dishonest behaviors. Or the owner may need to contact the company’s attorney and hire a forensic accountant to perform a formal fraud investigation.

Audit smarter

Today, companies generate, process and store massive amounts of electronic data on their networks. Increasingly, auditors are using analytical tools on this data to conduct basic audit procedures, such as vouching transactions and comparing data to external benchmarks. This frees up auditors to focus their efforts on complex transactions, suspicious relationships and high-risk accounts. Contact us for more information about how our auditors use analytical software tools in the field.

© 2023

Auditing Work in Progress

Many types of businesses — such as homebuilders and manufacturers — turn raw materials into finished products for customers. Production is a continuous process. So, any work that’s been started but isn’t yet completed before the end of the accounting period is reported as work in progress (WIP) under U.S. Generally Accepted Accounting Principles (GAAP).

The value of WIP relies on management’s estimates. Auditors often give special attention to these estimates during fieldwork. Here’s what to expect during a financial statement audit.

Inventory 101

Inventory is classified as a current asset on the balance sheet under GAAP. There are three types of inventory:

  1. Raw materials. These are tangible inputs received from suppliers but haven’t yet been worked with. For example, a construction firm may have a supply of lumber and drywall in a warehouse that counts as raw materials.
  2. Work in progress. This term refers to partially finished products at various stages of completion. Items classified as WIP still require further work, processing, assembly, and/or inspection. It includes raw materials, labor, and overhead allocations.
  3. Finished goods. These items are fully complete. They may be ready for customers to purchase or, in the case of custom products, available for delivery or title transfer to customers.

Accounting For Costs: Standard vs. Job Costing

When a company produces large volumes of the same product, management allocates costs as each phase of the production process is completed. This is known as standard costing. For example, if a production process involves eight steps, the company might allocate 50% of its costs to the product once the fourth stage is completed.

On the other hand, when a company produces unique products — such as the construction of a factory or made-to-order parts — a job costing system is typically used to allocate materials, labor, and overhead costs as incurred.

Most experienced managers use realistic estimates, but inexperienced or dishonest managers may inflate WIP values. This can make a company appear healthier than it really is by overstating the value of inventory at the end of the period and understating cost of goods sold during the current accounting period.

Eye on WIP

Auditors focus significant effort on analyzing how companies quantify and allocate their costs. Under standard costing, companies typically record inventory (including WIP) at cost, and then recognize revenue once they sell finished goods. The WIP balance grows based on the number of steps completed in the production process. Auditors analyze the methods used to quantify a product’s standard costs, as well as how the company allocates the costs corresponding to each phase of production.

Conversely, with job costing, revenue recognition happens based on the percentage-of-completion or completed-contract method. Auditors analyze the process to allocate materials, labor, and overhead to each job. In particular, they test to ensure that costs assigned to a particular product or project correspond to that job.

Get Work in Progress Right

Under both methods, accounting for WIP affects the balance sheet and the income statement. We can help determine whether your company’s WIP estimates are reasonable and whether your accounting practices comply with the recent changes to the revenue recognition rules for long-term contracts, if applicable. Contact us for more information on auditing work in progress.

Internal Control Questionnaires

Businesses rely on internal controls to help ensure the accuracy and integrity of their financial statements, as well as prevent fraud, waste, and abuse. Given their importance, internal controls are a key area of focus for internal and external auditors. Many auditors use detailed internal control questionnaires to help evaluate the internal control environment — and ensure a comprehensive assessment. Although some audit teams still use paper-based questionnaires, many prefer an electronic format. Here’s an overview of the types of questions that may be included and how the questionnaire may be used during an audit.

The Basics of Internal Control Questionnaires

The contents of internal control questionnaires vary from one audit firm to the next. They also may be customized for a particular industry or business. Most include general questions pertaining to the company’s mission, control environment, and compliance situation. There also may be sections dedicated to mission-critical or fraud-prone elements of the company’s operations, such as:

  • Accounts receivable,
  • Inventory,
  • Property, plant, and equipment,
  • Intellectual property (such as patents, copyrights and customer lists),
  • Trade payables,
  • Related party transactions, and
  • Payroll.

Questionnaires usually don’t take long to complete, because most questions are closed-ended, requiring only yes-or-no answers. For example, a question might ask: Is a physical inventory count conducted annually? However, there also may be space for open-ended responses. For instance, a question might ask for a list of controls that limit physical access to the company’s inventory.

Three Approaches To Administer Questionnaires

Internal control questionnaires are generally administered using one of the following three approaches:

Completion by Company Personnel

Here, management completes the questionnaire independently. The audit team might request the company’s organization chart to ensure that the appropriate individuals are selected to participate. Auditors also might conduct preliminary interviews to confirm their selections before assigning the questionnaire.

Completion by the Auditor Based on Inquiry

Under this approach, the auditor meets with company personnel to discuss a particular element of the internal control environment. Then the auditor completes the relevant section of the questionnaire and asks the people who were interviewed to review and validate the responses.

Completion by the Auditor After Testing

Here, the auditor completes the questionnaire after observing and testing the internal control environment. Once auditors complete the questionnaire, they typically ask management to review and validate the responses.

Enhanced Understanding

The purpose of the internal control questionnaire is to help the audit team assess your company’s internal control system. Coupled with the audit team’s training, expertise, and analysis, the questionnaire can help produce accurate, insightful audit reports. The insight gained from the questionnaire can also add value to your business by revealing holes in the control system that may need to be patched to prevent fraud, waste, and abuse. Contact us for more information.

Optimize the Value of Your SOX 404a Compliance Efforts

Click here to download a copy of the slide deck used during the presentation.

Taking an active approach to Section 404a enables more accurate financials, reduces compliance costs, and improves risk management and internal controls.

Learn how to embrace 404a’s value and the opportunity it offers as our experts share insights about:

  • Aspects of the framework to focus on for the highest impact (in the shortest time)
  • How (and why) to create a risk-based, process-focused compliance culture
  • Reducing future costs and compliance challenges
  • Keeping staff up-to-date on SOX processes
  • Presenting accurate financials with confidence

Let’s talk about your project.

Whether you need to unravel a complex challenge, launch a new initiative, or want to take your business to the next level, we’re here. Share your vision and we can help you achieve it.

Four Ways to Improve the Effectiveness of your Audit Committee

Audit committees face many challenges. As the economy rebounds from the COVID-19 pandemic, there are new dimensions to the oversight roles and responsibilities of the audit committees. Consider taking these following four steps to fortify your committee’s effectiveness.

1. Focus on fundamentals

Once you’ve wrapped up the financial reporting process for this fiscal year, take the time to revisit goals and expectations to develop an agenda for next year that directs the audit committee’s attention back to the basics. The committee is responsible for oversight of the following key areas:

  • Financial reporting,
  • Disclosures,
  • Internal controls, and
  • The company’s audit process.

Each agenda item before the audit committee should ideally relate to one of these areas.

2. Assess the composition of the audit committee

Periodically, it’s appropriate to assess the level of financial expertise that each member of the committee possesses, especially if the composition of the group has recently changed. If the company anticipates significant changes in the regulatory environment under the Biden administration, now may be the time to add suitably qualified members to the audit committee. At least one member of the audit committee should possess in-depth financial expertise. (Publicly traded companies have specific “financial literacy” requirements.)

Today, companies are increasingly recognizing the value of adding gender and racial diversity to decision-making bodies, including audit committees. These companies believe diversity is a strength that leads to better-informed decisions and fresh perspectives.

3. Get a handle on operational risk

Your company’s risk profile may have changed during the pandemic. For example, you may have temporarily cut staff or deferred capital investments to preserve cash flow during uncertain times.

However, these crisis-driven decisions may adversely affect the company’s long-term financial performance. The audit committee should consider asking management to review significant operational decisions made in the last year to determine if excess risk was created and whether it’s time to change course.

In addition, operational changes and increased financial pressures on accounting staff may expose the company to increased risk of internal and external fraud. And remote working arrangements could lead to cyberattacks and theft of intellectual property. It’s a good time to request that internal auditors commission a fraud and cyber-risk assessment. Proactively assessing these issues can dramatically reduce the probability of losses occurring.

4. Consider exposure to financial difficulties across the supply chain

The pandemic also may have affected certain suppliers and customers, especially those located overseas or in states with COVID 19 restrictions on business operations. The audit committee should evaluate whether management has identified the company’s material relationships and the potential financial and operational impact if any of those businesses close or file for bankruptcy.

Full speed ahead

By taking proactive measures, your audit committee can help improve your company’s performance as the economy returns to full capacity. Contact us to help position your company to minimize risks and maximize value-added opportunities in 2023 and beyond.

Tips for Work Remotely with Your Auditor

 

As many businesses are closed or are limiting third-party access due to COVID-19 surges across the United States, auditors will be less likely to visit in person in 2021. Many services, such as year-end inventory observations, management inquiries, and audit testing, must be performed remotely.

You may have already worked remotely with your auditor on your audit, review, or compilation during the pandemic. However, if you haven’t had that pleasure, you will want to consider the tips below to ensure your audit, review, or compilation goes smoothly this year.

5 Tips for Working Remotely With Your Auditor

Scheduling and Planning

Unlike past years, you will not have the pressure of knowing the “auditors” will be here on “x” date. Set a reminder appointment on your calendar when your audit, review, or compilation will be performed. Discuss with your auditor what time of the day works best for everyone before fieldwork begins. Schedule 30-minute check-in calls each day during fieldwork to go over minor questions from both teams and to discuss general progress so everyone is on the same page.

Identify How You Best Communicate

As you most likely will not get the pleasure of seeing your auditor in person during your upcoming engagement, it will be important to know how best to communicate and let your auditor know this upfront. Communication will be the key to keeping your engagement together. Timely responses from you and your team will be even more important in this remote environment. If you know you communicate best with your auditors through email, tell them that. If you prefer phone calls, tell them that. Determining this upfront will help reduce stress later on.

Using Video Conferencing

Video meetings, like Zoom, will be the primary way to communicate during your upcoming engagement. Your accountant will use video calls to screen share and ask questions. They may also use video to perform walkthroughs of internal controls with you and your team. You might be asked to share your screen to show how a particular process operates in real-time. If you are new to video conferencing, please let your auditor know, and they can schedule a meeting to walk you through how to use video tools during your upcoming fieldwork best.

Get Used to Scanning Documents

In past years, you may have dropped huge piles of testing support in front of your auditors. However, ensure you are well versed in scanning your documents to your computer this year. Unless there is a specific reason you cannot scan documents for your auditor, your auditor will be asking you to scan and upload everything to a secure portal for review. If there is a reason that warrants not scanning, work with your team to get those documents sent via postal mail to the accounting office. However, this should be avoided to reduce the risk of records getting lost during transit.

Inventory Observations

Most inventory observations completed this year will have to be done remotely. However, there may be other options open to you, and if you have concerns, discuss them immediately with the manager or partner on the engagement. The key to having these observations go smoothly is a strong wireless internet connection throughout your warehouse and having two employees involved in the observation (one to hold the camera and one to physically count the items in the video). Your audit team can schedule a video conference test run to try things out before the big day to ensure things will run smoothly.

This year will be a learning experience for us all, but have confidence that together you and your audit team can make this transition as seamless as possible. For questions about working remotely with your auditor, contact us.

Levels Of Assurance: Choosing The Right Option For Your Business Today

Recent hard times are causing private companies to re-evaluate the type of financial statements they should generate. Some are considering downgrading to lower levels of assurance to reduce financial reporting costs — but a downgrade may compromise financial reporting quality and reliability. Others recognize there are additional risks, leading them to upgrade their assurance level to help prevent and detect potential fraud and financial misstatement schemes.

When deciding what’s appropriate for your company, it’s important to factor in the needs of creditors or investors, as well as the size, complexity and risk level of your organization. Some companies also worry that major changes to U.S. Generally Accepted Accounting Principles (GAAP) and federal tax laws in recent years may be overwhelming internal accounting personnel — and additional guidance from external accountants is a welcome resource for them to rely on while implementing the changes.

3 types of assurance services

In plain English, the term “assurance” refers to how confident (or assured) you are that your financial reports are reliable, timely and relevant. In order of increasing level of rigor, accountants generally offer three types of assurance services:

  1. Compilations. These engagements provide no assurance that financial statements are free from material misstatement and conform with Generally Accepted Accounting Principles (GAAP). Instead, the CPA puts financial information that management generates in-house into a GAAP financial statement format. Footnote disclosures and cash flow information are optional and often omitted.
  2. Reviews. Reviewed financial statements provide limited assurance that the statements are free from material misstatement and conform with GAAP. Here, the accountant applies analytical procedures to identify unusual items or trends in the financial statements. She or he inquires about these anomalies, as well as the company’s accounting policies and procedures.

Reviewed statements always include footnote disclosures and a statement of cash flows. But the accountant isn’t required to evaluate internal controls, verify information with third parties or physically inspect assets.

  1. Audits. The most rigorous level of assurance is provided by an audit. It offers a reasonable level of assurance that your financial statements are free from material misstatement and conform with GAAP.

The Securities and Exchange Commission requires public companies to have an annual audit. Larger private companies also may opt for this service to satisfy outside lenders and investors. Audited financial statements are the only type of report to include an express opinion about whether the financial statements are fairly presented and conform with GAAP.

Beyond the analytical and inquiry steps taken in a review, auditors perform “search and verification” procedures. They also review internal control systems, tailor audit programs for potential risks of material misstatement and report on control weaknesses when they deliver the audit report.

Time for a change?

Not every business needs audited financial statements, and audits don’t guarantee against fraud or financial misstatement. But the higher the level of assurance you choose, the more confidence you’ll have that the financial statements fairly present your company’s performance. Contact us to learn more about which of the three levels of assurance is right for your business or for more information on our risk assurance services.