Public companies urged to focus on effect of new standards on internal controls

SEC officials are urging public companies to pay close attention to how adoption of some of the FASB’s major standards may affect their financial reporting controls in 2018 and beyond.

“Internal control that is effective within one set of conditions may not necessarily be effective when those conditions change significantly,” said Michael Dusza, a professional accounting fellow with the SEC in a Dec. 4, 2017, speech at the AICPA Conference on Current SEC and PCAOB Developments in Washington. “Adoption of the new accounting standards for revenue, leases, and credit losses may be akin to a significant, complex, or unusual transaction for many companies and, like those transactions, it will put the design of companies’ [internal control over financial reporting] ICFR to test.”

In Dusza’s view, some of the key guidance for ensuring that a company has internal controls that are working properly and effectively prepared for the FASB’s new standards can be found in Principle No. 9 of the Internal Control—Integrated Framework from the Committee of Sponsoring Organizations of the Treadway Commission (COSO). The principle says an organization “identifies and assesses changes that could significantly impact the system of internal control,” and it is part of the Internal Control Framework’s assessment of the risk to prevent accounting errors. The principle also directs companies to use the risk assessment to avoid making accounting errors in the future.

According to Dusza, the changes to U.S. GAAP from Accounting Standards Update (ASU) No. 2014-09, Revenue From Contracts With Customers (Topic 606), ASU No. 2016-02, Leases (Topic 842), and ASU No. 2016-13, Financial Instruments—Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments, can be used by companies and auditors to address underlying risks in the internal controls or financial reporting systems that had been lurking in the background without detection.

“Such deficiencies need to be evaluated as to their severity and communicated to the company’s investors or audit committee,” Dusza said. “Identifying relevant risks of material misstatement that may arise under the new accounting standards and designing appropriately responsive controls may not be an easy task. However, we believe that if done right, the foundation established will over time yield benefits of a more effective and efficient ICFR process.”

Dusza also said that while companies have to employ a substantial amount of judgment when designing and implementing their internal controls, they can take steps to increase the likelihood that the controls are implemented properly if they plan and document the design and implementation. The planning and documentation can heighten the confidence a company’s management, auditors, and audit committee have that the controls were well designed and implemented correctly.

In recent years, the PCAOB’s heightened attention to Auditing Standard (AS) 2201, An Audit of Internal Control Over Financial Reporting That Is Integrated With an Audit of Financial Statements, formerly AS 5, during its inspection process has forced accounting firms to apply more rigorous evaluations to clients’ internal controls. Companies have also been forced to correct the weaknesses in their controls.

In addition SEC officials have made a priority of correcting internal control problems.

For more information on this topic, or to learn how Baker Tilly SEC accounting specialists can help, contact our team.

We have partnered with Thomson Reuters to issue our monthly SEC accounting insights. Please feel free to contact Baker Tilly at if you have any questions related to these articles or Baker Tilly's Accounting and Assurance Services. © 2017 Thomson Reuters/Tax & Accounting. All Rights Reserved.