SEC Proposes Scaling Back Auditor Testing of Internal Controls for Most US-Listed Companies
The SEC has proposed a new rule that would exempt most US-listed companies from the requirement to have external auditors test their internal controls over financial reporting. This move aims to reduce the perceived burden and cost associated with going public and maintaining a US listing, a mandate that originated in the Enron era. While companies would still need to implement and report on their internal controls, the direct auditor testing of these fraud safeguards would be significantly scaled back.
SEC Proposes Significant Shift in Internal Control Auditing
The U.S. Securities and Exchange Commission (SEC) has put forth a proposal that could fundamentally alter the landscape of internal control auditing for a majority of US-listed companies. This draft rule seeks to exempt these entities from the current requirement of engaging an external auditor to field-test safeguards designed to ensure the reliability of corporate revenue and asset value disclosures. This initiative is framed as part of a broader SEC strategy to alleviate barriers for companies considering an initial public offering (IPO) or maintaining their listing in the United States.
For internal audit and assurance professionals, this proposal signals a potential shift in focus and resource allocation. While the direct external auditor testing of internal controls over financial reporting (ICFR) may be reduced for many, the underlying responsibility for companies to establish and maintain robust internal controls remains. The article highlights that companies would still be obligated to implement these controls and transparently inform investors about their effectiveness. This implies that internal audit functions will continue to play a critical role in assessing and reporting on the efficacy of these internal safeguards, potentially taking on an even more prominent role in demonstrating control effectiveness to management and the audit committee.
The proposed change targets a mandate that emerged in the wake of the Enron scandal, which has long been viewed by corporate managers as a costly and burdensome hurdle. The SEC's rationale appears to be rooted in a desire to make US markets more attractive for companies. However, assurance professionals will need to carefully consider the implications of this scaling back. Gaps in internal controls are explicitly noted as red flags for investors, underscoring the continued importance of strong internal audit oversight and the need for clear, comprehensive reporting on the state of a company's control environment, even without the same level of external auditor involvement in testing.
Read more
