Ooooh scary!

This has been going on now for two years and seems to have escalated into the kind of fight men have when trying to prove who’s bigger and tougher. It looks to me like it’s personal rather than productive. The SEC has access to as much as they need to review the work of the Deloitte China firm’s audit of Longtop  - or any other Chinese fraud for a US listed company - assuming the US Deloitte firm had as much as they needed to sign off on the companies’ filings with the SEC over the years.

The SEC admits in their latest complaint against Deloitte Shanghai that they asked Deloitte US for the information the firm has right here in the US on Longtop and other US listed foreign based audits. The firm’s first answer was to deny any involvement in the audit.

4. On April 9, 2010, staff served Deloitte LLP, the U.S. member firm of the Global Firm with a subpoena requesting audit work papers relating to the Global Firm’s audit of Client A’s financial statements for the period January 1, 2008 through April 9, 2010.

5. Between April 13, 2010 and May 18, 2010, staff had several communications with U.S. based counsels for both Deloitte LLP and the Global Firm.

6. Counsel for Deloitte LLP initially informed the staff that Deloitte LLP did not perform any audit work for Client A, that all audit work was conducted by Respondent, and that Deloitte LLP did not have possession, custody, or control of the documents called for by the subpoena.

7. Counsel for Deloitte LLP subsequently informed the staff that Deloitte LLP performed some review work of Client A’s periodic reports and produced certain documents relating to this review to the staff.

Deloitte did eventually produce some documents related to the audit that are, and always have been, available in the US. If the Deloitte US reviews were sufficient, that should be enough for the SEC to see the quality of work performed by the Deloitte Shanghai unit.

So why is SEC continuing to fight this inane fight when, in reality, they should have all the information they need to investigate the Longtop or any other fraud? I suspect that the SEC attorneys are super annoyed with Deloitte’s lawyers and have decided to use their unlimited budget and intimidating administrative powers to annoy them back. Unfortunately, this just puts more money in the pocket of the super expensive Sidley & Austin outside counsel representing Deloitte Shanghai.

(Coincidentally, it was also a Sidley & Austin lawyer for KPMG that recently so annoyed a judge in a class action overtime case against the firm the judge ordered the firm to preserve the hardrives of all laptops for past, present and future class members. Note to Sidley & Austin:  Scorched earth tactics not working.)

US-based GAAP and SEC reporting experts in the global audit firms review the workpapers behind the filings for every non-US based audit client that is listed on a US stock exchange, all over the world, before any filing with the SEC. That’s one of the quality control procedures all the firms who audit foreign-based, US listed multinationals have in place, not only because it is expected by regulators but because it’s good business.

The SEC/GAAP reporting team or Reg S-X review team – it may be drawn from and called something different in each firm – is the last stop before a foreign-based US issuer can file its quarterly and annual reports, as well as any filings for additional stock or debt offerings, with the SEC. Sometimes the team consists of experts from the firm’s financial advisory consulting group or capital markets group – the professionals who help companies prepare for IPOs, especially foreign companies who want a stock exchange listing in the US. The team may also call on additional expertise from the firm’s national office – a kind of one-stop shop for getting questions answered on arcane technical matters or standards for specific industries. Professionals may play double duty as consultants to some companies and remote members of an audit team for others. That way they can pick up billable hours reviewing filings when there are no deals to be done.

When a US-based listed company is a multinational, the US audit firm will use its member firm network extensively to do the audit work necessary all over the world to support the overall audit opinion. In this case, a US audit firm is expected to closely supervise and control the work of foreign affiliates who contribute to its audit.

From Part 2 of the PCAOB’s inspection report – the private quality control review of US firms.

Review of Processes Related to the Firm’s Use of Audit Work that the Firm’s Foreign Affiliates Perform on the Foreign Operations of the Firm’s U.S. Issuer Audit Clients

The inspection team performed procedures in this area with respect to the processes the Firm uses to ensure that the audit work that its foreign affiliates perform on the foreign operations of U.S. issuers is effective and in accordance with applicable standards performed by the Firm’s foreign affiliates on the foreign operations of U.S. issuer clients.

Some non-US audit member firms have more SEC reporting and GAAP experts on-site than others. I suspect the largest firms in Canada and the UK have their own SEC and GAAP reporting quality assurance review team for this purpose, but many countries do not.

PwC, for example, has the Global Capital Markets Group, a team of professionals dedicated to providing technical, strategic and project management advisory services to non-US companies actively interested in raising capital and/or listing their securities in the US securities markets. GCMG has partners and hundreds of professionals in more than 20 countries around the world.

GCMG assists companies in meeting ongoing SEC reporting requirements (e.g., review the company’s annual filing on Form 20-F and assist the company in responding to any SEC review comments). They are qualified to review management’s evaluation of the accounting treatment under U.S. GAAP and/or IFRS of new, complex or unusual transactions, such as a new type of financial instrument or a business combination. (Henri Steenkamp, a native of South Africa and a PwC alumni, is one of these accounting technical experts who helped companies prepare for IPOs for PwC before he helped Man Financial spin off MF Global and went on to become CFO of that PwC audit client.)

Take India, for example. According to the First Amended Complaint for the class action lawsuit brought by Satyam shareholders against Price Waterhouse India, PricewaterhouseCoopers US and PwC international as well as various executives and directors of Satyam, Price Waterhouse India created a multi-country, multi-disciplinary audit team for Satyam that included professionals with expert knowledge of US GAAP and SEC reporting requirements. Doing so satisfied PCAOB audit standards – which applied to Satyam because its shares (actually ADSs) were listed on the New York Stock Exchange. PW India had to assure the PCAOB, the SEC and investors worldwide that Satyam’s filings on Forms 20-F and 6-K, for example, were fully audited and reviewed in accordance with US auditing standards and were prepared using US GAAP.

The professionals PwC US brought to the global Satyam audit “client service” team are people like Suresh Persaud. Persaud was “the designated reviewer [] with respect to Satyam,” according to emails to PW India partner Gopalakrishnan and Peter Ferraro of the PwC Global Capital Markets Group that were described in the class action Complaint. Persuad was based in PwC US’s Florham Park, New Jersey office and a director in SEC-FPI (i.e., Foreign Private Issuer) Services in US National Risk & Quality with PwC US. The SEC-FPI is based in the United States. That group provides technical support to PwC GCMG on complex or unusual issues regarding US GAAP, US SEC reporting and other related matters.

PwC US GCMG provided both consulting work to Satyam and support for the audit. GCMG was paid by PW India by invoicing the Indian firm for their services. The Indian firm, in turn, billed Satyam for these hours both as part of the audit and as additional consulting services. GCMG’s review and “sign off” on PW India’s audit was required per PwC Global policy before it could be considered final. However, the PW India partners had the last word on the Satyam audit. PW India “owned” Satyam as a client. In the case of Satyam, it seems the PW India partners either got bad advice, no advice, or ignored the advice of the US quality babysitters.

For example, the Complaint describes an exchange between Melissa Bledsoe, a manager at PwC GCMG and the India team where she explains the importance of PwC GCMG’s review of Satyam filings and gives them a timeline for the review:

“We will need to have a minimum of FIVE full days to review the Form 20-F. When we receive critical matters, we expect all significant current year issues to [be] well documented and the conclusions appropriately researched and concluded.”

The Designated Reviewer Program for Satyam included 22 procedures to be completed by the reviewer prior to the submission of any filings with the SEC. The procedures focused primarily on ensuring that the Satyam audits were performed in accordance with PCAOB audit requirements. In the “Scope of Designated Reviewer Support” section, the program specifies:

“It was agreed with the engagement partner that a review of the document is required by GCMG international office as done in the previous years.”

The Designated Reviewer Program also set forth the procedure for resolving conflicts between the designated reviewer and the engagement partner.

All the forms used to complete routine audit procedures for Satyam come from PwC US according to the Complaint. The forms used in the Satyam audits included:

• MyClient US GAAS Supplement
• MyClient US Master Data Program
• PwC Audit US 3110-3180
• PwC US Template Manager
• PwC Audit Guide – US via the PwC Audit – US Lotus Notes database
• US template manager for the SUD (Summary of Unadjusted Differences)

PW India had to consult PwC US on critical issues including significant accounting, auditing and financial reporting matters and all reviews of unaudited interim information were performed as required under PwC US audit policy.

The first Amended Consolidated Class Action Complaint goes on to say that PwC US regularly reviewed and approved US GAAP accounting issues on behalf of Satyam, including for:

• Each of Satyam’s financial statements filed on Form 20-F with the SEC during the Class Period
• Acquisition of Citisoft (e.g., discussed in a July 14, 2005 email, among others)
• Sale of a subsidiary, SIFY (e.g., discussed in a January 24, 2005 email, among 
others)
• Put option and reversal (e.g., discussed in a February 9, 2005 email, among others)
• Preference shares (e.g., discussed in a December 31, 2004 email, among others)
• Variable interest entities (e.g., discussed in a July 14, 2005 email, among others)
• Summary of unadjusted differences (e.g., discussed in an April 19, 2006 email, among others)
• Goodwill impairment (e.g., discussed in a December 31, 2004 email, among others), and
• Potential restatements (e.g., discussed in August 14, 2004, March 28, 2005 and May 2, 2008 emails, among others)

“Final clearance” by PwC GCMG was a necessary prerequisite for Satyam’s SEC filings. For example, in an April 22, 2005 email to Peter Ferraro of PwC GCMG, Khazat Kotwal requested expedited turnaround of an amended F-3:

“Satyam want’s [sic] PwC’s final clearance to file the F-3 on APRIL 25, 2005. Kindly call me immediately if you have any concerns to meet this deadline. I do not want to be in an embarassing [sic] position once more in front of the client. Also, note that there is a lot at stake for the client so even if we all have to stretch ourselves we should do that. Looking forward to a positive response from you.”

PwC GCMG acceded to the artificial deadline imposed by Satyam, according to the Complaint, and allowed the amended F-3 to be filed shortly thereafter with little further review.

In spite of so much involvement of the US firm in the Satyam audit, including critical quality reviews as safeguards for US investors before reports were filed with the SEC, the SEC and the PCAOB sanctioned and fined only the Pricewaterhouse India firm for the negligent audit that missed a $1 billion fraud.

The Public Company Auditing Oversight Board (PCAOB) has not been prohibited from inspecting Indian firms like they have been in China and the EU. The PCAOB inspected the PW India audit firm for the first time in the spring of 2008. We did not see a copy of that inspection report until three years later, in April of 2011, when the SEC and PCAOB jointly issued sanctions and a $7.5 million fine against the PW India firm.

It revealed a type-two error:

“Following the performance of the inspection procedures, a significant issue came to light that had not been identified in the inspection review.”

And that’s pretty much all the public section of the PCAOB inspection report says. It does describe, briefly, the subsequent events that forced the regulator to throw out any conclusions they had come to during the inspection.

The class action settlement, a private civil matter in New York federal courts, did however hold the US and the International PricewaterhouseCoopers firms liable for the Satyam fraud in addition to the India firm. PW India, PricewaterhouseCoopers US and PricewaterhouseCoopers International Ltd settled with investors for a total of $25.5 million. It’s not clear how much each contributed but there have been recent reports out of India that the local firm received funds from the International firm which could not be traced to payment for services. It’s against the law in India for a local audit firm to be subsidized by a foreign one.

By over and over again singling out only a single country practice for sanctions and disciplinary action, the SEC and PCAOB imply that the work of an audit of a US-listed, foreign, multinational company is performed in isolation.

It is not.

From the First Amended Complaint:

Notably, Satyam’s audited and unaudited financial statements prepared under Indian GAAP for the quarter and half year ended September 30, 2004, filed as exhibits to the October 25, 2004 6-K, were signed on behalf of the Board of Directors and by Price Waterhouse, by Gopalakrishnan, in “Santa Clara [California], USA.” Santa Clara, California is a location of Satyam’s US operations.

PwC International has also paid for the legal counsel to both PW India partners, Gopalakrishnan and Talluri, who are on trial in India.

It’s common for the global audit firms to want it both ways. When they promote themselves and their services to clients, regulators, legislators, and the media, they invoke the brand image of a “seamless global network of firms operating.

This is the bold title and introduction to Deloitte’s most recent Global Annual Review:

A Borderless Network

We all dream of the best future there can be.

For the clients and people of the Deloitte member firm network, it is one marked by excellence in client service, quality, accountability, distinctive talent development, innovation, and best-in-class practices. It is a future shaped by the unique capabilities and confidence of a global leader in professional services. And it is driven by the resources and commitments of a powerful, borderless network.

It’s sexier for the SEC to pick a fight with China to make political points about investor protection than to admit that the SEC and the PCAOB have not been monitoring the role the US firms play in audits of non-US based issuers audited by foreign member firms very well. The SEC also missed the boat on Longtop, in particular, and can’t blame the reverse merger loophole for letting a possible fraudster sell securities in the US. Longtop was a traditional listing. US regulators are making a habit of picking on the foreign member firms even when the issue is always integrity of the financial of US-listed companies. The regulators are giving the US firm, Deloitte US, a pass. That’s just like they did in the Satyam case. They did not hold the US audit firm accountable. They choose to ignore the charade of the global network concept.

There was ample evidence of significant involvement of PwC US in the negligent “no audit at all” at Satyam. The process of reviewing filings of foreign private issuers is the same at all large audit firms – the typically US based and US controlled GAAP and SEC reporting experts have to review everything – yet SEC will not push back on the US firm or hold them accountable for the quality of audits for US issuers.

The SEC’s pursuit of “paperwork” from Deloitte Shanghai is an exercise in futility. (All the records are electronic, anyway, and available in the firm’s global “cloud”.) The rules are changing in China and the audit firms there will be even more untouchable once they are Chinese owned and operated. That’s set to happen completely by 2017 as previous joint venture agreements with non-Chines partners will soon expire and the Chinese government is taking advantage of the opportunity to become even more nationalistic  – if that’s even possible – and expand the Chinese professional class rather than depending on foreigners to support its growth.

US regulators are criticizing professional services quality in China and the systemic corruption implied by frauds that include Chinese banks helping their corporate customers to falsify bank statements and account balance confirmations requested by auditors. At the same time, The Wall Street Journal is reporting “a landmark” decision by the Federal Reserve to allow three state-backed Chinese banks to expand in the US. Industrial & Commercial Bank of China Ltd., one of the world’s largest banking companies, will make the first acquisition of a U.S. retail-banking network by a state-owned Chinese lender when it buys 80% of the U.S. subsidiary of Bank of East Asia, a Hong Kong company with 13 branches in New York and California. The Fed also approved two Beijing-based banks, Agricultural Bank of China Ltd. and Bank of China Ltd., to build branches in New York City and Chicago, respectively.

The Fed better make sure they can walk into Chinese banks on US soil and inspect them.

Last week was Groupon’s big week, although not in a good way. What happened? Well, the premier source of daily deal dish got knocked down a few more pegs after announcing a revision to 4th quarter earnings and the announcement by management that there was a material weakness in internal controls over financial reporting that was causing their disclosure controls to be ineffective. Groupon went public just a few months ago, last November, and the annual report was the company’s first filing as a public company.

Here’s one of the few journalists who got the details right, Jonathan Weil of Bloomberg, explaining why, in this case, the news was especially bad:

Didn’t Groupon know before its initial public offering that its controls were weak? A company spokesman, Paul Taaffe, declined to comment. Let’s assume for the moment, though, that its executives did know. Even then, they wouldn’t have had to tell investors beforehand.

That’s because there is no requirement to disclose a control weakness in a company’s IPO prospectus. Groupon would have had no obligation to disclose the problem until it filed its first quarterly or annual report as a public company — which is what it did. Sandbagging IPO investors in this manner is perfectly legal, it turns out.

The reason lies with a gaping hole in the Sarbanes-Oxley Act, which Congress passed in 2002 in response to the accounting scandals at Enron Corp. and WorldCom Inc. That statute had two main sections related to companies’ internal controls, which are the systems and processes that companies are supposed to have in place to ensure the information they report is accurate. Those provisions apply only to companies that are public already, not ones that have registered for IPOs.

One section, called 302, requires public companies’ top executives to evaluate each quarter whether their disclosure controls and procedures are effective. The other section, known as 404, is better known. It requires public companies in their annual reports to include assessments by management and outside auditors about the effectiveness of their internal controls over financial reporting. Congress left it to the Securities and Exchange Commission to write the rules implementing those provisions.

Here’s where it gets tricky. Groupon reported the weakness in its financial-reporting controls through a Section 302 disclosure, not a Section 404 report. In other words, the problem was serious enough that it amounted to a shortcoming in the company’s overall disclosure controls.

Groupon won’t have to comply with Section 404’s requirements until its second annual report, due next year, under an exemption the SEC passed in 2006 for newly public companies. Likewise, Groupon’s auditor, Ernst & Young LLP, to date has expressed no opinion on the company’s internal controls in its audit reports.

From the moment Groupon announced the revision on March 30, there were two important facts that almost all major media financial journalists got wrong:

1) The announcement of lower revenue and lower income for the fourth quarter was a revision of an earnings release, not a restatement. Groupon never filed a 10Q so there was no SEC filing to restate. Fessing up to the right numbers in the annual report was the first time the company was bound to report those numbers and, at that time, they corrected previously announced earnings for the 4th Quarter.

2) Management made the assessment of the material weakness in internal controls over financial reporting that caused disclosure controls to be ineffective, not auditor Ernst & Young. Ernst & Young deserves no credit for the announcement, nor any blame, just yet, for the fact that the weaknesses had to be finally admitted. There is no transparency regarding the auditor’s agreement or disagreement previously with Groupon, any public documentation of their discussions or any reason to believe Ernst & Young either encouraged or discouraged Groupon to get their act together sooner.

We just don’t know.

What we do know is that Ernst & Young signed the fourth clean audit opinion when it signed the audit report included in Groupon’s annual report. With the three audited financial statements included in the S-1, we can assume that control weaknesses Ernst & Young was aware of, if they were aware of any, were not serious enough in their opinion to qualify the audit opinion.

Because I was very busy with some other projects when the Groupon announcement came out I chose to be quoted regarding Groupon, rather than to blog about it, last week. I also tried to use Twitter to alert fellow journalists and the readers that the reporting had mistakes.

I was asked to comment on the Groupon story by three media outlets: the Marketplace radio program on PRI/NPR, Phil Rosenthal at the Chicago Tribune, and Crain’s Chicago Business.

I haven’t seen the story in Crain’s yet, but it Here’s the Crain’s link. It was nice to have two local media outlets notice they had someone who writes about these issues right here in Chicago where Groupon is based.

Marketplace’s Heidi Moore, who I follow on Twitter, wrote a short piece and my comment is strictly color. You can read the text and listen here.

The Tribune piece is extensive and Phil Rosenthal does a great job explaining why Groupon’s success or failure means a lot to the Chicago tech scene.  I get a long quote:

“As a Chicagoan, I’m really sad, because we’re proud when somebody does good here,” said Francine McKenna, an expert on the accounting and auditing industry who writes the Accounting Watchdog column for Forbes. “We love promoting our companies, especially homegrown success stories, and this is embarrassing.

“Because they’re growing so fast, because they’re trying to take a less conservative approach when they’re developing these numbers, because they want to shine the best possible light on what they’re doing, they got caught short. There was nothing they could do but admit they screwed up.”

To be honest, I’m holding back a bit on this subject because Groupon is a small part of a larger piece I’m wrapping up, hopefully, for the next issue of Forbes Magazine.  So let me make a few comments that did not make it to the magazine piece.

The role of the auditor, Ernst & Young, is confusing to experts, let alone the average investor or business reader.  Should the firm have caught Groupon’s errors before or after the IPO? Did Ernst & Young catch Groupon’s errors before the IPO and now?  Did Ernst & Young influence Groupon management’s decision to make the painful acknowledgement that they were caught short in the return reserves department and had to revise revenue and earnings? We’ll never know.

Here’s what Groupon management admitted in the annual report:

“…management concluded as of December 31, 2011 that our disclosure controls and procedures were not effective at the reasonable assurance level due to a material weakness in our internal control over financial reporting, which is described below.

In connection with the preparation of our financial statements for the year ended December 31, 2011, we concluded there is a material weakness in the design and operating effectiveness of our internal control over financial reporting as defined in SEC Regulation S-X. “

Groupon says they are deficient in:

• Controls over monthly financial close process and procedures
• Controls to insure accounts were complete and accurate and agreed to detailed support
• Controls over account reconciliations to identify errors and omissions in journal entries
• Controls over timely, effective review of estimates, assumptions and related reconciliations and analyses, including those related to customer refund reserves

That’s a lot of weakness. I find hard to believe these weaknesses only showed up in the last month or so of the year, after the IPO and multiple S-1 filings. Could Ernst & Young have stopped the IPO? Could the SEC have stopped the IPO?

One proposal that the audit industry regulator, the PCAOB, has on the table that could help in the future – but maybe not for pre-registration filings and auditor opinions – is the Auditor’s Discussion and Analysis. (The italics are my comments back to the PCAOB, the audit industry regulator under the SEC.)

b. In what ways, if any, could the standard auditor’s report or other auditor reporting be improved to provide more relevant and useful information to investors and other users of financial statements? Two places where the current report could be improved are:

1. Development of a clearing house of auditor names attached to public company audit engagements worldwide with their biographies and information about sanctions, suspensions and litigation against them.  I’m not so concerned about seeing a name on a printed report as knowing who is responsible for that audit over time and their qualifications and professional history.

2. The addition of an auditor’s “Disclosure and Analysis” would be priceless. It should be addressed directly to shareholders, not the Audit Committee, and be written in the style of Warren Buffet’s letter to shareholders.  It should state where the auditors and management disagreed and which one prevailed.  It should focus on judgments, estimates, and the range of practices especially regarding interpretation of key accounting standards amongst that issuer’s peer group.

c. Should the Board consider expanding the auditor’s role to provide assurance on matters in addition to the financial statements? If so, in what other areas of financial reporting should auditors provide assurance? Auditors should provide explicit assurance on MD&A. They are already required by standards to communicate with the Audit Committee regarding the adequacy of required disclosures. Interim Auditing Standard AU 380 requires auditors to determine whether all audit-related matters are communicated to the committee.

Potential Alternatives for Changes to the Auditor’s Report

A. Auditor’s Discussion and Analysis

Questions

5. Should the Board consider an AD&A as an alternative for providing additional information in the auditor’s report? Yes

a. If you support an AD&A as an alternative, provide an explanation as to why. See above 1.b.

b. Do you think an AD&A should comment on the audit, the company’s financial statements or both? Both. Provide an explanation as to why. Should the AD&A comment about any other information? The quality of management’s D&A and any disagreements in that regard over sufficiency or quality of disclosures.

c. Which types of information in an AD&A would be most relevant and useful in making investment decisions? I think information about how the issuer compares in key metrics, disclosures, aggressive interpretation of standards, and use of models and estimates to their peers would be very useful.  In some industries, one auditor has an audit relationship with several major companies, addresses similar issues, evaluates similar approaches and either sees consistent or inconsistent results. This type of discussion and comparison would be very useful to identify outliers and anomalies as well as instances of collusion amongst companies with significant business with each other.

Another factor to consider is the auditor’s responsibility right now with regard to disclosure or reporting of fraud and illegal acts – if errors and misstatements rise to that level even pre-IPO.  I’ve written previously that auditors are not very quick to tattle-tale on the executives of the companies they audit.  The audit firms prefer to work it out internally and over time. There’s just too much money at stake both as an auditor and as a consultant. We do not know what Ernst & Young’s fees from Groupon – or Zynga or Facebook – are yet.  The first proxies are not out.  But we do know how much money was at stake with some other clients that have had issues:

• Ernst & Young was paid more than $150 million in fees by Lehman for 2001 to bankruptcy in 2008 according to the New York Attorney General complaint against Ernst & Young for fraud regarding lack of disclosure of Lehman’s issues.
• Google paid Ernst & Young $13 million in 2010 and 2009. Google’s proxy did not explain how Ernst & Young could reduce its fee for audit services to this high-risk company by $1 million in 2010. Google is a serial subject of SEC investigations for its accounting for stock options and taxes. The company recently settled a Department of Justice criminal investigation over the illegal use of its AdWords program by Canadian pharmacies. Ernst & Young did charge Google $500 thousand more in 2010 to address those tax issues.
• UBS, home of a recent rogue trader scandal, paid Ernst & Young $63 million in 2011 for their the audit, $12 million for audit-related activities such as assurance and attest services, control and performance reports, advisory on accounting standards, transaction consulting including due diligence, and tax advisory.  Ernst & Young also earns another $32 million for services performed on behalf of UBS investment funds, many of which have independent fund boards or trustees.
• News Corp, where executives are accused of paying illegal bribes and hiding those payments on the balance sheet, paid Ernst & Young almost $35 million dollars in 2010 and about $31 million in 2009.  The increase equals about 10% more for more tax consulting services, which make up almost half – $16 million – of the total fees paid to EY by News Corp. That, to me, is a serious indictment of EY’s independence as auditor.

Getting back to Groupon and their erroneous earnings release and uncontrolled S-1s…

According to a recently published academic paper entitled, Pro forma disclosures, audit fees, and auditor resignations:

Pro forma disclosures are non-GAAP disclosures; however, under the provisions of SAS 8, auditors are still responsible for ensuring that no overtly misleading voluntary disclosures are released to investors. That is, auditors are required to review voluntary disclosures and prevent any misleading or overtly optimistic information from being released. In addition, auditors are potentially responsible for ensuring consistency of pro forma reporting in voluntary disclosures, such as press releases, with any pro forma numbers included in mandated disclosures, such as SEC 10-K or 10-Q reports (PwC Dataline 2010-03).

I know I expect the auditors to be earning their fees by looking out for investors. But maybe that’s just pie in the sky.

The video is Glen Hansard and Marketa Irglova singing “You must have fallen from the sky” from The Swell Season.

Original main page art from this site.

sciss

I’m surprised there hasn’t been more speculation about who the issuers are in all of Deloitte’s inspections reports. Wouldn’t it be nice if all the issuers in all the inspection reports were disclosed?

Every once and a while someone accuses me of being harder on one firm than another. Typically he/she thinks I’m being too hard on PwC, since I worked there last.  Someone even swore I must have worked for RSM McGladrey given the one or two times I wrote critically about that firm. And there’s a host of folks that think I alternately hate KPMG or Ernst & Young more than the rest.

Deloitte has a special place in my heart. Their office here in Chicago is a really big one. The firm bought my beloved BearingPoint Public Services practice when my employer from my Latin America days went bankrupt. And Deloitte generated probably the most active commenter forums on my blog during their recurring layoffs between 2007-2009.

Right now Deloitte may look like the worst of the Big Four but only because Deloitte is the most publicly incorrigible. That could change at any time. It would be easy to make a case that any of the four largest global firms was on the brink of being put out of their misery, not by an SEC or DOJ charge, but by a preponderance of private legal actions that have become a time and money sinkhole. Deloitte is the current example of a firm – like Ernst & Young is because of Lehman – that’s preoccupied with litigation. They’ve taken their eye off the audit quality ball.

Enron was the catalyst for the U.S. Department of Justice to criminally indict global audit firm Arthur Andersen causing its collapse. But it wasn’t Enron alone that forced DOJ to act. Arthur Andersen made a number of promises to regulators to improve and never sin again that were, over and over, not kept.

In October of 2008, the SEC and FINRA – not Deloitte – caught a Deloitte Vice Chairman trading on insider information in several Fortune 500 clients, including audit clients. Each of those Deloitte audit clients – Berkshire Hathaway among them – was forced to conduct an internal investigation to confirm Deloitte’s independence before Deloitte could continue as the auditor.

The same specific audit engagement criticisms as 2006 show up in subsequent inspection reports for Deloitte’s 2007 and 2008 audits.

• In 2007, application of generally accepted accounting principles and generally accepted auditing standards pertaining to hedge accounting for interest rate swaps, including the failure to identify two related departures from generally accepted accounting principles
• In 2007 and 2008, application of generally accepted accounting principles and generally accepted auditing standards pertaining to the accounting for deferred tax assets, including in one case a failure to identify a departure from generally accepted accounting principles
• In 2008, failure to identify a material weakness in an issuer’s internal controls over its allowance for doubtful accounts

The Deloitte U.S. CEO admitted in its “2010 Advancing Quality Through Transparency Inaugural Report”, that the PCAOB again privately criticized similar quality control issues during inspections of 2007 and 2008 audits. In addition, internal Deloitte reports described more than 475 reprimands to staff and partners in 2009 for infractions such as not following policies regarding auditor independence.

In December of 2010 another Deloitte partner was accused of insider trading.

Many of the audit risk issues described in earlier Deloitte inspection reports show up again in a summary prepared by the PCAOB of its inspectors’ observations during the financial crisis. (The PCAOB says the inspection report for Deloitte’s 2009 audits should be issued by the end of 2011.)

In April of 2011, Navistar – a client for almost 100 years until it fired Deloitte in 2005 – sued Deloitte for fraud, fraudulent concealment, negligent misrepresentations, and professional malpractice amongst other claims. The suit, for 2002-2005 audits, is pending and its merits have not yet been judged. But it raises some interesting issues about the use of the PCAOB’s inspection reports in private litigation, including the non-public portion once it is disclosed.

According to Navistar, the PCAOB selected the company as one of the Deloitte audits to review in 2003 and found several deficiencies. Deloitte audit partners for a Navistar subsidiary,  Christopher Anderson and  Thomas Linden, were sanctioned by the PCAOB. Navistar’s lawsuit claims that Deloitte had a duty to disclose to their audit committee the full scope of what the company says were the PCAOB’s concerns about the auditor’s quality controls. The lawsuit refers to the private portion of Deloitte’s inspection report for 2004 audits.

Why does it take so long for the PCAOB to publish the inspection reports and the public portion of the private report after the firm’s time to respond is up? It’s been five years since the 2006 audits, three years since the inspection report was published, two years since the twelve-month window for Deloitte to make corrections closed.

SEC Rule 104(h)(1), adopted quietly with no comment or press release in the fall of 2010, builds in an additional delay before publishing potentially controversial reports. Although the rule keeps the SEC process private, and the PCAOB is not allowed to discuss whether any particular audit firm appealed to the SEC over its report, the delay allows time for an audit firm to seek SEC redress.

Sources close to the issue tell me Deloitte definitely appealed the PCAOB’s threat to go public.

Keep in mind that while Deloitte bickers with the PCAOB, the audit firm charges hundreds of millions to produce auditor opinions for banks and systemically important companies that were bailed out, forcibly acquired on the brink of failure, or effectively nationalized.

Deloitte was the auditor for Bear Stearns, Merrill Lynch, Washington Mutual, Taylor Bean & Whitaker, American Home, and Beazer. None of these, except Beazer, is still standing. Deloitte has been sued for its audits of all of them.

Deloitte is still the auditor for Fannie Mae, GM and GMAC, and Morgan Stanley. All of these companies received bailouts.

Deloitte also audits the entire Federal Reserve system, and Berkshire Hathaway and BlackRock – two of the major players that supported the recovery of financial system during and after the crisis.

Jim Doty, Chairman of the PCAOB since January, said in a recent speech that the Board was disappointed in the audit firms’ approach to disclosing the results of PCAOB inspection reports to clients. “We hear that auditors are often less than forthcoming with audit committees that try to elicit information about inspection results…”

Here’s a short excerpt from my column on Tuesday at American Banker, “Bankers, Beware An Auditor That Blows Off Its Regulator”.

The PCAOB’s decision to make the 2006 quality control criticisms public, and the fact that the Securities and Exchange Commission allowed it to do so, tell me Deloitte is still fighting the regulators. The deadlines for Deloitte to fix or sufficiently respond to criticisms in the 2007 and 2008 inspection reports have passed. We could soon see previously nonpublic information from those reports, too.

The risk for banks in a situation like this is that an auditor that brazenly irritates its regulator may draw unwanted attention to its clients from their regulators. For example, PCAOB spokeswoman Colleen Brennan reminds me that the SEC knows the names of every company whose audit deficiencies are mentioned in a PCAOB auditor inspection report.

Please read the rest at American Banker.

You may remember earlier this year when The New York Times broke a little story about General Electric’s tax savvyways and the best tax law firm the universe had ever seen (aka the GE tax department).

The report caused more than a few people to get bent out of shape because the Times said GE was enjoying $14.2 billion in profit while “claim[ing] a tax benefit of $3.2 billion.” What that “benefit” really entailed was a mystery but many people jumped to the conclusion that it was a “refund” andProPublica (possibly a little peeved that they got scooped) tried to set the record straight on the Times story.

Despite all the back and forth, everyone was pissed at GE. The company lost aTwitter joust with Henry Blodget and then a bogus press release went out claiming the company was returning the “refund” of $3.2 billion and the Associated Press ran it. Slightly awkward.

Francine McKenna also did a write-up on KPMG’s role in this little soap opera, as the firm has been the auditor for GE since Bill Taft was maxing out the White House bathtub.

The latest twist comes from a tip we received earlier about a “Preservation Notice” sent to all KPMG employees yesterday from the firm’s Office of General Counsel (“OGC”).

URGENT TARGETED PRESERVATION NOTICE: GENERAL ELECTRIC’S LOAN STAFF ARRANGEMENTS

Please be advised that until further notice from KPMG LLP’s (KPMG or firm) Office of General Counsel (OGC), you are hereby directed to take all steps necessary to preserve and protect any and all documents created or received from January 1, 2008 through the date of this Notice relating or referring to the loaning, assignment or secondment of tax or other professionals to General Electric Company and its direct and indirect subsidiaries, affiliates and divisions (collectively “General Electric’s Loan Staff Arrangements”).

Last March, I wrote the story that highlighted this arrangement. The preservation notice refers to tax and “other loaned staff arrangements” so there may be more like this at GE.

Uh oh.

Based on my reading of the rules, loaning, assigning, or seconding tax or any “bookkeeping” staff is not allowed for the auditor. What’s worse is that KPMG had been sanctioned recently for a similar issue in Australia. I guess they thought the SEC/PCAOB would never go after them in the U.S. and never for trying to “please” such a high-profile client.

The Sarbanes-Oxley Act of 2002 started out tough on tax. The rules regarding prohibited activities by the auditor, intended to preserve their independence, scared the living daylights out of the largest firms. It appeared initially that the SEC would prohibit the tax side of the firms from providing highly lucrative tax advice to their audit clients. Many of those professionals started planning an exit from their firms so they could continue working with long time clients.

A compromise was reached. The result is one of the loosest and most generous exceptions to auditor independence rules on the books.

The Commission reiterates its long-standing position that an accounting firm can provide tax services to its audit clients without impairing the firm’s independence. Accordingly, accountants may continue to provide tax services such as tax compliance, tax planning, and tax advice to audit clients, subject to the normal audit committee pre-approval requirements under 2-01(c)(7).

The Sarbanes-Oxley Act of 2002 also prohibits an auditor from providing “bookkeeping” services to its audit clients.

The rules utilize the previous definition of bookkeeping or other services, which focuses on the provision of services involving: (1) maintaining or preparing the audit client’s accounting records, (2) preparing financial statements that are filed with the Commission or the information that forms the basis of financial statements filed with the Commission, or (3) preparing or originating source data underlying the audit client’s financial statements. Our experience with this definition demonstrates that the concept of bookkeeping and other services is well understood in practice.

In defiance of these provisions, KPMG – GE’s auditor – provides “loaned staff” or staff augmentation to GE’s tax department each year. These “temps” perform tasks that would be otherwise the responsibility of GE staff. Sources tell me KPMG employees working in GE tax have GE email addresses, are supervised by GE managers – there is no KPMG manager or partner on premises – and have access to GE employee facilities. They use GE computers because the software required for their tasks is GE proprietary software.

This type of “secondment” to an audit client is never allowed. KPMG should know better. KPMG was recently sanctioned by the SEC for a similar transgression involving their Australian office.

KPMG Australia and at least one other KPMG member firm outside Australia seconded non-tax professional staff to work at each client’s premises, under the supervision and direction of each client, doing the same types of work that each client’s own employees or managers ordinarily would perform, in violation of the prohibition under Rule 201(c)(4)(vi) against “[a]cting, temporarily or permanently, as a director, officer, or employee of an audit client, or performing any decision-making, supervisory, or ongoing monitoring function for the audit client.”

KPMG earns approximately 10% of their total fee from GE for tax services not connected to the audit directly or indirectly. GE’s policies state that these engagements, if for more than $1 million dollars, must be pre-approved by the GE Audit Committee. However, these services should never have been provided at all per SEC independence rules -rules that pre-date Sarbanes-Oxley.

KPMG is well known for supporting, as an auditor, aggressive tax strategies.  Recent controversy over long-time audit client Citigroup’s use of deferred tax assets to pump up its profits is one example.  KPMG also once flew too close to the flame as a tax shelter provider. Its advice to private clients on how to pay less to the IRS almost got the firm taken out of the game completely.

So why, for a measly $8-10 million a year, is KPMG playing with fire in providing these low value, low margin, low status services to GE?  It may be that KPMG wants to hold on to the relationship at any cost.

Read the rest of my original story at Forbes.

Read the rest of the Going Concern story here.

The first column, “Deloitte Blurs The Lines To Court Mutual Funds,” discusses the appointment of SEC and Investment Company Institute alumni Elizabeth Krentzman as that firm’s new head of the U.S. mutual funds practice. Her responsibilities include business development and delivery of audit services as well as tax, financial advisory, and consulting.

Elizabeth Krentzman is a lawyer, not a CPA. She’s worked 11 out of the last 14 years at Deloitte, always on the consulting side of the house. But now auditors are reporting to her.

That’s because this month she got a new job leading Deloitte’s U.S. mutual fund industry practice. She oversees the auditors as well as the tax, financial advisory and consulting staff who serve that industry…

Read the rest here.

I can’t be there tomorrow in person so I thought I would answer a few of the questions for you and for them.

I’ve provided comments to some of the questions below in Bold. I’ve written on these topics many, many times. Instead of repeating those remarks, I’m directing you to some of the most relevant posts.  If you’d like to add your comments please add the appropriate question number for the PCAOB Board.

Ernst & Young Lehman Litigation: It’s No Victory If You’re Going To Trial (Judge Kaplan was damning in his criticism of vague and subjective auditing standards and found it impossible to hold Ernst & Young liable for not complying with them.)

New At Forbes: My Comments On The Latest Sanctions Against Ernst & Young

Going In Circles: A Few Remarks On Audit Reform (On auditor rotation and auditor signing of audit reports.)

The State of Sarbanes-Oxley Compliance: The Protiviti Survey Results

Say Anything: The Big 4 Defense of Overtime Exemptions

McKenna At The Georgia Southern Fraud And Forensic Accounting Conference (With a link to my presentation, “The Skeptical Professional: Requirements and Case Studies”)

Being Expedient: PwC Settles US Class Action

McKenna Speaks At The American Accounting Association Public Interest Section

Not Over Until It’s Over: Price Waterhouse India Settles Satyam (The Satyam case is a classic one regarding auditor independence and auditor skepticism.  Price Waterhouse India demonstrated not much of either.  The PwC US and International firms lack the authority to force them to.  The regulators are not doing anything about this and the courts are impotent, in many cases, to correct this fault.)

Price Waterhouse India Settles With Regulators But Satyam Saga Not Over

Will Auditors Be Held Accountable? The PCAOB Has A Plan

Auditors Abandon Investors On Liability Limits

Auditors Under Pressure In The UK. Or Are They?

Dear PCAOB Board: Your Job Is To Serve And Protect Investors

Top Ten Things Lawyers Should Know About Auditors

Asking The Difficult Questions: An Article About Audit Committees For IIA’s Internal Auditor Magazine

Questions in PCAOB Concept Release on the Auditor’s Report

Content of the Auditor’s Report

Questions

1. Many have suggested that the auditor’s report, and in some cases, the auditor’s role, should be expanded so that it is more relevant and useful to investors and other users of financial statements.

a. Should the Board undertake a standard-setting initiative to consider improvements to the auditor’s reporting model? Yes

Why or why not? Investors pay billions worldwide for an audit report that is universally panned. Investors have been vocal In the UK and in the US regarding the uselessness of the ‘pass/fail” approach to the auditor’s opinion. The current report provides little information about the judgments and decision processes taking place behind the scenes.  Auditors failed during the financial crisis to warn investors of trouble, let alone provide the realistic guaranty of safety for even a limited period of time that shareholders expect.  If this is an “expectations gap” we must close it, either by removing the requirement for an audit opinion from exchange rules – and admitting its futility like the US SEC did with ratings agencies – or improving it so it has a useful purpose for investors. They deserve to get their money’s worth from the effort.

b. In what ways, if any, could the standard auditor’s report or other auditor reporting be improved to provide more relevant and useful information to investors and other users of financial statements? Two places where the current report could be improved are:

1. Development of a clearing house of auditor names attached to public company audit engagements worldwide with their biographies and information about sanctions, suspensions and litigation against them.  I’m not so concerned about seeing a name on a printed report as knowing who is responsible for that audit over time and their qualifications and professional history.

2. The addition of an auditor’s “Disclosure and Analysis” would be priceless. It should be addressed directly to shareholders, not the Audit Committee, and be written in the style of Warren Buffet’s letter to shareholders.  It should state where the auditors and management disagreed and which one prevailed.  It should focus on judgments, estimates, and the range of practices especially regarding interpretation of key accounting standards amongst that issuer’s peer group.

c. Should the Board consider expanding the auditor’s role to provide assurance on matters in addition to the financial statements? If so, in what other areas of financial reporting should auditors provide assurance? Auditors should provide explicit assurance on MD&A. They are already required by standards to communicate with the Audit Committee regarding the adequacy of required disclosures. Interim Auditing Standard AU 380 requires auditors to determine whether all audit-related matters are communicated to the committee:

The auditor’s responsibility under Generally Accepted Auditing Standards (GAAS)

• Significant accounting policies
• Management judgments and accounting estimates
• Audit adjustments
• The auditor’s judgments about the quality of the entity’s accounting principles
• The quality of the management discussion and analysis (MD&A)
• Disagreements with management
• Consultation with other accountants
• Major issues discussed with management before retention
• Difficulties encountered in performing the audit

An Auditor’s Discussion and Analysis should repeat the substance of these communications and highlight where the Audit Committee and/or management disagree with auditors.

2. The standard auditor’s report on the financial statements contains an opinion about whether the financial statements present fairly, in all material respects, the financial condition, results of operations, and cash flows in conformity with the applicable financial reporting framework. This type of approach to the opinion is sometimes referred to as a “pass/fail model.”

a.    Should the auditor’s report retain the pass/fail model? No If so, why?

b.    If not, why not, and what changes are needed? The auditor’s report requires more detailed grading with an explanation of the grades.  Perhaps the grades can be assigned based on whether the failings are individually material or material in aggregate and whether they relate to adherence to standards, aggressive use of estimates and models, lack of disclosure, or poor internal controls.  I am in favor of the separate opinion on internal controls and question a company that could have an adverse opinion on internal controls (material weaknesses) and yet receive a clean opinion on their financial statements.

c.     If the pass/fail model were retained, are there changes to the report or supplemental reporting that would be beneficial? If so, describe such changes or supplemental reporting.

3. Some preparers and audit committee members have indicated that additional information about the company’s financial statements should be provided by them, not the auditor. Who is most appropriate (e.g., management, the audit committee, or the auditor) to provide additional information regarding the company’s financial statements to financial statement users? I am skeptical that most Audit Committees are sufficiently detached and independent of management that communications from them would be any more useful to shareholders.  That is a problem in and of itself.  If auditors were required to provide their own discussion or analysis, they may be reminded of their own need for independence from management.  However, the problem we have, and which is not solved by revisions to the audit report itself, is the problem of auditor independence as long as the auditors are paid by and contract for their services with an Audit Committee controlled by and in service to management.

At the PCAOB’s public meeting in March I heard some object to the auditor providing information to shareholders directly because that might harm the “relationship” between auditors and management.  Yes.  And that is exactly why auditors should be forced to face shareholders directly. Even the SEC’s Chief Accountant and the PCAOB Chairman have admitted auditors are too cozy with management, a non-independent Audit Committee encourages and enables that, and many auditors have forgotten who their true clients are – shareholders.  Auditors should respond directly to shareholders, not to the management-controlled proxy – a potentially non – independent Audit Committee.

4. Some changes to the standard auditor’s report could result in the need for amendments to the report on internal control over financial reporting, as required by Auditing Standard No. 5. If amendments were made to the auditor’s report on internal control over financial reporting, what should they be, and why are they necessary?

We should go back to a separate auditors report on internal controls over financial reporting. If an issuer receives an adverse opinion on internal controls it should be rare or impossible for that issuer to receive any “passing” grade on the financial statements.

Potential Alternatives for Changes to the Auditor’s Report

A. Auditor’s Discussion and Analysis

Questions

5. Should the Board consider an AD&A as an alternative for providing additional information in the auditor’s report? Yes

a. If you support an AD&A as an alternative, provide an explanation as to why. See above 1.b.

b. Do you think an AD&A should comment on the audit, the company’s financial statements or both? Both. Provide an explanation as to why. Should the AD&A comment about any other information? The quality of management’s D&A and any disagreements in that regard over sufficiency or quality of disclosures.

c. Which types of information in an AD&A would be most relevant and useful in making investment decisions? I think information about how the issuer compares in key metrics, disclosures, aggressive interpretation of standards, and use of models and estimates to their peers would be very useful.  In some industries, one auditor has an audit relationship with several major companies, addresses similar issues, evaluates similar approaches and either sees consistent or inconsistent results. This type of discussion and comparison would be very useful to identify outliers and anomalies as well as instances of collusion amongst companies with significant business alliances or who act as counterparties to each other.

d. If you do not support an AD&A as an alternative, explain why.

e. Are there alternatives other than an AD&A where the auditor could comment on the audit, the company’s financial statements, or both? What are they?

6. What types of information should an AD&A include about the audit? What is the appropriate content and level of detail regarding these matters presented in an AD&A (i.e., audit risk, audit procedures and results, and auditor independence)?

7. What types of information should an AD&A include about the auditor’s views on the company’s financial statements based on the audit? What is the appropriate content and level of detail regarding these matters presented in an AD&A (i.e., management’s judgments and estimates, accounting policies and practices, and difficult or contentious issues, including “close calls”)?

8. Should a standard format be required for an AD&A? Why or why not?

9. Some investors suggested that, in addition to audit risk, an AD&A should include a discussion of other risks, such as business risks, strategic risks, or operational risks. Discussion of risks other than audit risk would require an expansion of the auditor’s current responsibilities. What are the potential benefits and shortcomings of including such risks in an AD&A? The auditor is required to be aware of and knowledgeable about these areas per the standards. The auditor must take them into consideration in planning the scope of the audit. I see no additional work to disclose them and to give investors information about how this issuer compares to peer group.

10. How can boilerplate language be avoided in an AD&A while providing consistency among such reports? Regulators should forbid it and enforce accordingly.  All shareholders will, hopefully, start demanding meaningful information.

11. What are the potential benefits and shortcomings of implementing an AD&A?

12. What are your views regarding the potential for an AD&A to present inconsistent or competing information between the auditor and management? I’m not troubled by this.  In fact, I look forward to it. What effect will this have on management’s financial statement presentation? Management will be required to defend it. They should be prepared to do so or to back down.

B. Required and Expanded Use of Emphasis Paragraphs

Questions

13. Would the types of matters described in the illustrative emphasis paragraphs be relevant and useful in making investment decisions? If so, how would they be used?

14. Should the Board consider a requirement to include areas of emphasis in each audit report, together with related key audit procedures?

a. If you support required and expanded emphasis paragraphs as an alternative, provide an explanation as to why.

b. If you do not support required and expanded emphasis paragraphs as an alternative, provide an explanation as to why.

15. What specific information should required and expanded emphasis paragraphs include regarding the audit or the company’s financial statements? What other matters should be required to be included in emphasis paragraphs?

16. What is the appropriate content and level of detail regarding the matters presented in required emphasis paragraphs?

17. How can boilerplate language be avoided in required emphasis paragraphs while providing consistency among such audit reports? 18. What are the potential benefits and shortcomings of implementing required and expanded emphasis paragraphs?

C. Auditor Assurance on Other Information Outside the Financial Statements

Questions

19. Should the Board consider auditor assurance on other information outside the financial statements as an alternative for enhancing the auditor’s reporting model?

a. If you support auditor assurance on other information outside the financial statements as an alternative, provide an explanation as to why.

b. On what information should the auditor provide assurance (e.g., MD&A, earnings releases, non-GAAP information, or other matters)? MD&A, 10Qs.  Auditors should distance themselves from non-GAAP disclosures. Earnings releases should not be inconsistent with 10Qs.

c. What level of assurance would be most appropriate for the auditor to provide on information outside the financial statements?

d. If the auditor were to provide assurance on a portion or portions of the MD&A, what portion or portions would be most appropriate and why?

e. Would auditor reporting on a portion or portions of the MD&A affect the nature of MD&A disclosures? If so, how?

f. Are the requirements in the Board’s attestation standard, AT sec. 701, sufficient to provide the appropriate level of auditor assurance on other information outside the financial statements? If not, what other requirements should be considered?

g. If you do not support auditor assurance on other information outside the financial statements, provide an explanation as to why.

20. What are the potential benefits and shortcomings of implementing auditor assurance on other information outside the financial statements?

D. Clarification of the Standard Auditor’s Report

Questions

21. The concept release presents suggestions on how to clarify the auditor’s report in the following areas:

• Reasonable assurance
• Auditor’s responsibility for fraud
• Auditor’s responsibility for financial statement disclosures
• Management’s responsibility for the preparation of the financial statements
• Auditor’s responsibility for information outside the financial statements
• Auditor independence

a. Do you believe some or all of these clarifications are appropriate? If so, explain which of these clarifications is appropriate? How should the auditor’s report be clarified?

b. Would these potential clarifications serve to enhance the auditor’s report and help readers understand the auditor’s report and the auditor’s responsibilities? Provide an explanation as to why or why not.

c. What other clarifications or improvements to the auditor’s reporting model can be made to better communicate the nature of an audit and the auditor’s responsibilities?

d. What are the implications to the scope of the audit, or the auditor’s responsibilities, resulting from the foregoing clarifications?

22. What are the potential benefits and shortcomings of providing clarifications of the language in the standard auditor’s report?

Questions Related to all Alternatives

23. This concept release presents several alternatives intended to improve auditor communication to the users of financial statements through the auditor’s reporting model. Which alternative is most appropriate and why?

24. Would a combination of the alternatives, or certain elements of the alternatives, be more effective in improving auditor communication than any one of the alternatives alone? What are those combinations of alternatives or elements?

25. What alternatives not mentioned in this concept release should the Board consider?

26. Each of the alternatives presented might require the development of an auditor reporting framework and criteria. What recommendations should the Board consider in developing such auditor reporting framework and related criteria for each of the alternatives?

27. Would financial statement users perceive any of these alternatives as providing a qualified or piecemeal opinion? If so, what steps could the Board take to mitigate the risk of this perception?

28. Do any of the alternatives better convey to the users of the financial statements the auditor’s role in the performance of an audit? Why or why not? Are there other recommendations that could better convey this role?

29. What effect would the various alternatives have on audit quality? What is the basis for your view?

30. Should changes to the auditor’s reporting model considered by the Board apply equally to all audit reports filed with the SEC, including those filed in connection with the financial statements of public companies, investment companies, investment advisers, brokers and dealers, and others? What would be the effects of applying the alternatives discussed in the concept release to the audit reports for such entities? If audit reports related to certain entities should be excluded from one or more of the alternatives, please explain the basis for such an exclusion.

IV. Considerations Related to Changing the Auditor’s Report

A. Effects on Audit Effort

B. Effects on the Auditor’s Relationships

C. Effects on Audit Committee Governance

D. Liability Considerations

E. Confidentiality

Questions

31. This concept release describes certain considerations related to changing the auditor’s report, such as effects on audit effort, effects on the auditor’s relationships, effects on audit committee governance, liability considerations, and confidentiality.

a. Are any of these considerations more important than others? If so, which ones and why?

b. If changes to the auditor’s reporting model increased cost, do you believe the benefits of such changes justify the potential cost? Why or why not?

c. Are there any other considerations related to changing the auditor’s report that this concept release has not addressed? If so, what are these considerations?

d. What requirements and other measures could the PCAOB or others put into place to address the potential effects of these considerations?

32. The concept release discusses the potential effects that providing additional information in the auditor’s report could have on relationships among the auditor, management, and the audit committee. If the auditor were to include in the auditor’s report information regarding the company’s financial statements, what potential effects could that have on the interaction among the auditor, management, and the audit committee?

Making the non-obvious connections between the audit firms and their clients, between the clients and each other, and between the firms and each other is like shooting fish in a barrel. As each new story comes out, especially about the banks, the web of connections and the repeated attempts by desperate executives to move the same deck chairs around on the financial system Titanic are becoming easier to spot.

Sometimes I don’t even have to close my eyes to see the last story where the same guy or the same assets or the same scam is mentioned.

Yesterday it was news of the sale of servicing rights to a gazillion dollars of almost worthless mortgages by Bank of America to Fannie Mae.  Why Fannie Mae?  Because they are so good at using their marketing skills to “conduit” bad paper from the very needy to the less needy.  But is the next guy really a sucker or do they know something we don’t?  When was the last time Fannie Mae assisted the system in this way?  And how do we know it was rotten paper crossing from one bad actor to perhaps another on a government-sponsored bridge built of the taxpayers’ aching backs?

And who is standing on the sidelines watching it all with a wink, a nudge, and a “say no more”?

For the answers to these and other questions, you’ll have to read, “Fool Me Twice: Bank of America Plays Hide and Seek Using Fannie Mae.”

Here’s a teaser:

The last time Fannie Mae got involved in shape-shifting servicing rights to hide fraudulent activity was Taylor Bean Whitaker. That‘s the mortgage originator, audited by Deloitte, that used Fannie Mae’s silence and their influence, according to Bloomberg, to market servicing rights on bad loans to GMAC.

How do we know the most recent $73 billion portfolio might be full of loser loans made via potentially fraudulent means? Fannie Mae told us so when they sued Countrywide, the mortgage originator and source of significant woe Bank of America bought in 2008.

To his credit, Judge Kaplan does leave one important allegation for Ernst & Young to defend:

Ernst & Young had reason to know that Lehman’s 2Q 2008 financial statements could be materially misstated because of the extensive use of Repo 105 transactions.

John McDermott of FT Alphaville does a good job explaining why:

Kaplan dismisses the majority of the specific allegations against the auditors but writes that one particular incident means that the case against them cannot be thrown out [when] he stops to ask another question on Repo 105:

In other words, have plaintiffs sufficiently alleged that E&Y knew enough about Lehman’s use of Repo 105s to “window-dress” its period-end balance sheets to permit a finding that E&Y had no reasonable basis for believing that those balance sheets fairly presented the financial condition of Lehman?

The answer: yes, in one case.

Plaintiffs rely for this purpose on precisely the same alleged red flags discussed previously in connection with E&Y’s GAAS opinion – the “true sale” opinion, the netting grid, and the Lee interview. The first two are no stronger in this context than in that. The Lee interview, however, is a different matter.

The “Lee interview” pertains to warnings allegedly made by Matthew Lee, Lehman’s SVP for Global Balance Sheet and Legal Entity Accounting, that Ernst & Young were told of a $50bn repo 105 move in June 2008 but did not pass on the full information to Lehman’s board. Thus, it failed to fulfill GAAP requirements as part of its Q2 2008 auditing.

I’ve been saying for a while that there’s too much deflective focus on the accounting for Repo 105 and not enough on the disclosure.

Now they’ve got a public airing of some dirty laundry by the PCAOB.

From Compliance Week:

The Public Company Accounting Oversight Board has barred the now-former E&Y partner, Peter O’Toole, from associating with a PCAOB-registered firm for three years and fined him $50,000. The board barred the now former senior manager, Darrin G. Estella, from associating with a PCAOB-registered firm for two years. Both auditors can petition the board for reinstatement at the end of their penalty periods. In December, the PCOAB issued an earlier action against Jacqueline Higgins, an E&Y manager, in connection with the same incident.

The PCAOB says the three auditors created, backdated, and added documentation to an audit file when they learned it would soon be inspected by the board. The disciplinary orders say O’Toole was the engagement partner for an audit of an unnamed public company with a Sept. 30, 2009, year-end. The firm gave the company a clean audit opinion on Nov. 23, 2009, then learned the audit would be inspected in April 2010, with inspectors planning to study “securities valuation.”

Ernst & Young spokesman Charlie Perkins tells The Financial Times, “no harm, no foul,” as far as the firm is concerned.

“Our firm’s policy explicitly prohibits persons from supplementing or changing audit workpapers in circumstances like those present here,” said Charles Perkins, a spokesman for Ernst & Young, in a statement.

“When we determined that firm policy had been violated, we subsequently separated the partner and senior manager from the firm. We have co-operated fully with the PCAOB throughout its investigation of this matter. The conduct described in the order had no impact on our audit conclusions or on the client’s financial statements.”

Unless there are sanctions, we won’t know if more of this kind of thing is happening at U.S. firms. That’s becasue that part of the PCAOB inspection report is private.

We do know it’s happening at Ernst & Young in the U.K. Repeatedly.

From my post at Forbes.com, “By Any Means Possible: Auditors Try To Meet Standards By Faking It”:

The latest inspection report for Ernst & Young in the U.K., the same global firm that the PCAOB recently disciplined, cited specific deficiencies: (The AIU inspected thirteen engagements of a total of 295 eligible.)

Signing and dating of audit reports:

On two audits the auditor’s report was signed prior to the completion or evidencing of all necessary review procedures.

Completion of audit disclosure checklists:

…On two of the files that we reviewed it was unclear from the audit file whether the team had re‐performed the completion of the financial statements disclosure checklist.

Audit finalisation:

We found weaknesses in connection with audit finalisation procedures on seven of the audits we reviewed. The majority of these weaknesses related to undetected clerical drafting errors in the accounts including, in one case, an error in the disclosed audit fee.

That is, if there’s not a settlement first.

Yesterday I wrote up my analysis of the decision by Judge Kaplan for my column, “Accounting Watchdog”, at Forbes. In the interest of time and space, I stuck to commenting on the Ernst & Young portion of the decision.

Judge Kaplan dismissed the majority of the allegations against Ernst & Young. The same things auditors are always dismissed for. The only thing that’s new about the judge’s opinion is an indictment of the accounting standards themselves.

The Third Amended Complaint points to several General Standards (“GS”), interpretive Statements on Auditing Standards (“AU”), and Statements of Fieldwork that allegedly are part of GAAS and that E&Y allegedly violated. Many 288 of those standards are couched in rather general and in some cases inherently subjective terms. They require, for example, that the auditor plan the audit engagement properly, use “due professional care,” exercise “professional skepticism,” and “assess the risk of material misstatement due to fraud” – all matters as to which reasonable professionals planning or conducting an audit reasonably and frequently could disagree.

Bearing in mind that E&Y’s GAAS opinion, just like those rendered by all or substantially all accounting firms, is explicitly labeled as just that – an opinion that the audit complied with these broadly stated standards – more is necessary to make out a claim that the statement of opinion was false than a quarrel with whether these standards have been satisfied.

Or is this really news?

Judge Richard Posner during oral arguments in Fehribach v. Ernst & Young LLP, 2007 WL 2033734 (7th Cir. 7/17/07) (pdf),

“Posner: The auditor’s responsibility … so far as the company is concerned … is to make sure the [numbers] are accurate….  You don’t need an auditor to tell you your market is collapsing….  The auditors are not supposed to have business insight.  They’re counters.  They’re not supposed to make predictions about how your markets are doing.  They’re supposed to reconcile your books and indicate you’re not a going concern because your debt is too high and so on….

Do you think the auditor is supposed to know about market power?…  An auditor is not an economic consultant who goes out and figures out what the market trends in an industry are!…Your trends? That’s what the company knows. [Plantiff’s Attorney: You’re right. Here’s what the auditor’s responsibility under SAS 59...]

Posner: That is too vague for me…”

To his credit, Judge Kaplan does leave one important one allegation for Ernst & Young to defend:

Ernst & Young had reason to know that Lehman’s 2Q 2008 financial statements could be materially misstated because of the extensive use of Repo 105 transactions.

John McDermott of FT Alphaville does a good job explaining why:

Kaplan dismisses the majority of the specific allegations against the auditors but writes that one particular incident means that the case against them cannot be thrown out [when] he stops to ask another question on Repo 105:

In other words, have plaintiffs sufficiently alleged that E&Y knew enough about Lehman’s use of Repo 105s to “window-dress” its period-end balance sheets to permit a finding that E&Y had no reasonable basis for believing that those balance sheets fairly presented the financial condition of Lehman?

The answer: yes, in one case.

Plaintiffs rely for this purpose on precisely the same alleged red flags discussed previously in connection with E&Y’s GAAS opinion – the “true sale” opinion, the netting grid, and the Lee interview. The first two are no stronger in this context than in that. The Lee interview, however, is a different matter.

The “Lee interview” pertains to warnings allegedly made by Matthew Lee, Lehman’s SVP for Global Balance Sheet and Legal Entity Accounting, that Ernst & Young were told of a $50bn repo 105 move in June 2008 but did not pass on the full information to Lehman’s board. Thus, it failed to fulfill GAAP requirements as part of its Q2 2008 auditing.

I’ve been saying for a while that there’s too much deflective focus on the accounting for Repo 105 and not enough on the disclosure. And I took particular exception early on to Ernst & Young’s handling of the Matthew Lee “whistleblower” situation:

Ernst & Young failed to follow professional standards of care with respect to communications with Lehman’s Audit Committee.

Ernst & Young failed to follow professional standards of care with respect to an investigation of a whistleblower claim

Lehman’s own Corporate Audit group led by Beth Rudofker, together with Ernst & Young, investigated allegations about balance sheet substantiation problems made in a May 16, 2008 “whistleblower” letter sent to senior management by Matthew Lee. On June 12, 2008, during the investigation, Lee informed Ernst & Young about Lehman’s use of $50 billion of Repo 105 transactions in the second quarter of 2008. At a June 13, 2008 meeting, Ernst & Young failed to disclose that allegation to the Board’s Audit Committee. (Bankruptcy Examiner’s Report V3 page 945)

As the lawyers would say, the optics are bad here. The Audit Committee asks EY to support Lehman’s internal auditor in investigating a “whistleblower’s” allegations of balance sheet improprieties.  The auditors interview the “whistleblower” and then don’t say anything at any of the Audit Committee meetings. Turns out what Mr. Lee, the “whistleblower”, was alleging is what the examiner believes is the fundamental problem and grounds for “colorable claims” against top officers and EY.

The word “whistleblower” is tainted with tons of emotion post-Enron. We now look at those called “whistleblowers” and see heroes. But let’s look at what I think may have actually happened. Lehman’s Internal Audit department “naturally” asked their trusted, all-things-to-all-people advisor, EY, to help with the investigation of the “whistleblower’s” claims. The Internal Audit Department, not EY, was in charge of the investigation.

That was their first mistake. If I’ve said it once, I’ve said it a thousand times: The external auditor should not be conducting or assisting with internal investigations of potential fraud or illegal acts by top executives. I wrote about it atSiemens, subject of the largest ever FCPA settlement in history. KPMG, their auditor, got sued.

The external auditor should stay the hell away from internal investigations because they may get caught up in something they would rather not know. They may want to claim plausible deniability. And a company should not engage the external auditor to support internal investigations especially involving fraud or illegal acts by top management. Do they do it to be cheap or to keep dirty laundry inside? The external auditor is too often part of the problem, an enabler, instead of part of the solution.

If Lehman had hired another firm – a law firm or anyone except their external auditor – to perform the investigation, the investigation would have been covered end to end in privilege, the external auditor may or may not (in this case EY would have been better not to) have been included in the “circle of privilege,”  and the investigation would have been completed professionally.

However, by supporting this investigation, EY was essentially doing internal audit work, a prohibited service under Sarbanes-Oxley for independence reasons. It’s shocking to me that the EY audit partners did not at least turn over the investigation to EY’s Forensic Accounting and Investigations Practice in order to provide some semblance of independence and professionalism.

Even though EY may have been an unwilling party to knowledge of an ugly situation right before an audit committee meeting, they got stuck. They had an obligation under AU 380, as the external auditor  - not as an investigator – to inform the Audit Committee. They could have been on the other side being informed – or not – instead of being the one supposed to be doing the informing.

AU 380, the  rules for auditor communication with the Audit Committee, are very clear. But they relate to the auditors’ role as an auditor not the role  of an auditor who is lent as muscle to an internal investigation. By playing the “trusted advisor” they screwed themselves.

Stoplight?  Yellow. Looks bad, but EY may be able to talk their way out of this one once it gets to court. They need to explain how they were still looking into the issue, doing their “auditor” work and make sure their full but limited role and responsibilities for the process are explained. If they lose on this chalk it up to another case of audit partners wanting to be supermen to their clients, the corporation’s executives, rather than looking out for their own best interests. Unfortunately in this situation, the shareholders were probably going to lose either way.

For a few dollars more…  Or, more likely, no additional fee for helping with the internal investigation, Ernst & Young got stuck. Unfortunately, Berkshire Hathaway ignored this lesson in the Sokol case. They used a non-independent attorney and his law firm to investigate Sokol’s suspicious Lubrizol trades. And News Corp. is ignoring it, too. They also are using insiders to investigate the phone hacking allegations.

Despite what some columnists are saying…

Floyd Norris, The New York Times, July 28, 2011:

The company misled investors and its officers and directors may be held liable. But the company’s auditor seems likely to escape any responsibility for an audit that wrongly concluded the company’s financial statements were completely proper. That, anyway, is the conclusion a federal judge has reached regarding Lehman Brothers. The judge said this week that it appeared Lehman had violated Generally Accepted Accounting Principles, or GAAP, even if it was in technical compliance with accounting rules. But he threw out a claim against Ernst & Young, whose 2007 audit certified that Lehman had followed GAAP.

…I believe Ernst & Young has not escaped anything. Here’s what I emailed Lynn Turner, former Chief Accountant at the SEC, after he circulated Norris’ column to his newsletter subscribers:

They are on the hook for something, it allows discovery, and this is not the only case against them.

This Lehman suit over a securities offering is not Ernst & Young’s biggest worry. They are a bit player. The New York Attorney General’s case against them, the one about fraud, is where they star.

Nevertheless, this dangling allegation is serious – scienter regarding their client’s deliberate material misstatement of a quarterly financial statement filing and public disclosure.

Here’s an excerpt from what I wrote on March 31, 2010 after the Lehman Bankruptcy Examiner’s report came out and EY defended itself with a letter to Audit Committee members:

EY: General Comments

EY’s last audit was for the year ended November 30, 2007. Our opinion stated that Lehman’s financial statements for 2007 were fairly presented in accordance with US GAAP, and we remain of that view. We reviewed but did not audit the interim periods for Lehman’s first and second quarters of fiscal 2008.

Although technically correct, EY is not yet off the hook. In fact, EY did something that seems odd to me – issue an actual report of their review of the 10Qs in 2008 that were included in Lehman’s regulatory filings. I credit Jonathan Weil of Bloomberg for bringing this potential Achilles’ heel in EY’s defense to my attention. However, he incorrectly used the term “opinion” in his most recent commentary to refer to EY’s reports of their review that were included in Lehman’s 10Q’s. It’s an oddity that investment banks insist on a report for the 10Q review from their audit firms. A review is required. A report is not. I still don’t know why Lehman requested  reports to be included in quarterly filings. I certainly can’t, for the life of me, figure out why the auditors would do it.

Post- Private Securities Litigation Reform Act, auditors (and law firms) have escaped liabilities for misstatements in quarterly reports because they do not make “explicit” statements. That is, their review is done in the background, they provide no written report and their review is not technically, or in their opinion, an “opinion.”

But providing an actual report of the 10Q review, one that is included in the regulatory filing, may be what opens EY to liability for Lehman’s 2008 financials. Auditors also provide reports documenting their 10Q reviews for Goldman Sachs (PwC) and Morgan Stanley (Deloitte).

Deloitte also provided reports of their 10Q reviews for Merrill Lynch prior to their absorption by Bank of America and for Bear Stearns prior to their bankruptcy and absorption into JPM Chase. The auditor’s report of their review for Bear Stearns’ 10Q as of February 28, 2008 actually had a “going concern” warning. Bear Stearns agreed to be bought by JPM Chase in early March.That was crucial but too little too late. The actual 10Q was not issued until April, after the JPM purchase had been proposed.

Notably, EY does not provide these reports of their review of 10Qs for UBS, PwC does not do this for JPM Chase or Bank of America, and KPMG does not do so for Citigroup.

Cases such as Lattanzio v. Deloitte & Touche LLP, 476 F.3d 147, 154 (2d Cir. 2007) make it clear that an explicit statement by the auditors is necessary to hold them liable. I have not been able to find any cases where auditor reports of their 10Q reviews made the difference in auditor liability. It may difficult to find case like this since so many complaints of malpractice against the auditors settle rather than go to trial. I have the distinct impression Jonathan Weil thinks that provision of a report of the auditor’s 10Q review may strengthen the possibility of liability for EY.

I agree, but recognize I have nothing but hope to base this conclusion on.

In addition to the New York Attorney General’s case against Ernst & Young, they still have to worry about the SEC and Department of Justice. Serious sanctions against Ernst and Young by the SEC, or criminal charges from the Department of Justice for Lehman executives possibly fraudulent Section 302 certifications, are unlikely. However, the SEC and PCAOB would be remiss if they did not eventually sanction some individuals at least, if not the firm as a whole.

What I wrote October 31, 2010:

Ernst & Young, take my word for it, will never be indicted by the U.S. government, as a firm, for its role in any Lehman fraud that’s eventually proven. It’s also highly unlikely – 1000 to 1 odds I’d say – EY will be fined by the SEC or the PCAOB, as a firm, in a civil or disciplinary case.

The Ernst & Young partners named in the bankruptcy examiner’s report, and maybe a national practice partner, might be sanctioned by the PCAOB or SEC. Later. Much later. We can predict the timing based on the SEC’s handling of the Bally’s sanctions. Even with a slam dunk case, the SEC waited six years before they settled with EY.  The eventual sanctions against six Ernst & Young partners for the Bally’s fraud were too little and much too late to provide a deterrent or any real justice.

Ernst & Young, as a firm, and their individual partners are named as additional defendants in private lawsuits against Lehman executives. But the New York Court of Appeals, in a 4-3 opinion, refused to hold the auditors responsible for their role in frauds perpetrated by management in the Kirschner (Refco Trustee) v. KPMG and Teachers’ Retirement v. PwC (re: AIG 2002-2005 fraud) cases. The opinion reaffirmed the application of the in pari delicto doctrine and the principle of imputation in these cases.

The judges who disagreed with the majority opinion said it best:

These simplistic agency principles as applied by the majority serve to effectively immunize auditors and other outside professionals from liability wherever any corporate insider engages in fraud…it is unclear how immunizing gatekeeper professionals, as the majority has effectively done, actually incentivizes corporate principals to better monitor insider agents. Indeed, it seems that strict imputation rules merely invite gatekeeper professionals “to neglect their duty to ferret out fraud by corporate insiders because even if they are negligent, there will be no damages assessed against them for their malfeasance”

The more successful a fraud case is against Lehman’s executives, the less likely EY or any of its partners will suffer any consequences for their acquiescence to or complicity in the fraud. That’s not to say the firm won’t suffer slowly and painfully from the enormous amount of time and money devoted to defending themselves in Lehman litigation and the rest of the suits they face.

Don’t get me wrong.

I’m thrilled that there’s a lot of traffic in my lane. What I mean is, it’s good for everyone that we’re talking about these issues and that someone other than me and a few other broken records are playing these tunes.

Fairly new PCAOB Chairman Jim Doty and his fellow board members have been on the road constantly since the three newest members – Doty, Ferguson and Hanson – took their seats in February. And they’re not letting up on the auditors and their firms.

Every speech is laced with lessons, examples, and promises of more to come.

Some key areas of focus:

• Reform of the audit reporting model
• Erasing gaps in international inspection coverage especially U.K., E.U., and China
• Response to the Chinese reverse merger frauds
• Audit quality and professional skepticism
• Auditor independence
• Greater transparency of PCAOB activities especially sanctions and disciplinary activities

There’s been significant activity in many of these areas. In fact, Board member Lew Ferguson is currently in China with representatives of the SEC to discuss opening up that country to PCAOB inspectors.

But whenever talk of audit industry reform comes up, usually after the latest accounting scandal or major fraud, the same old suggestions come up again, too.

The global financial crisis set in motion, again, the soul searching that occurs every ten years or so in the audit industry. It’s been almost ten years since the Enron scandal bred the Sarbanes-Oxley legislation that was supposed to be the “be all end all” for auditor failures and to prevent frauds and failures of all kinds.

But, of course, this wasn’t the case.

Before that the U.S. had a savings and loan crisis and, before that, other crises of confidence in the profession sparked by individual malpractice cases or fraud and corruption where the auditors either missed the problem or, worse yet, were complicit in it.

The auditors’ role in the latest crisis is only recently being examined. I’ve been pushing hard for that since 2007 when we started to see the subprime crisis and the failures of mortgage originators and home builders. The subprime crisis turned into a credit crisis which turned into a full blown financial crisis and recession or depression depending on which country you live in and your personal circumstances.

I think the turning point in attitudes towards this crisis, and the auditors’ role in particular, was the Lehman bankruptcy examiner’s report in March 2010. This was the first time the issue of fraud was raised relative to major failures that precipitated the financial crisis and, specifically, with regard to the auditors. In the Lehman case it’s Ernst & Young.

Until then, most media accepted the bankers’ and government’s version that the end of 2008 was a black swan economic calamity of unpredictable and unprecedented proportions that no one could have prevented.

But even that didn’t really turn the tide completely for the auditors. Critics in the UK started asking the question, “Where were the auditors?” much sooner than anyone in the mainstream media in the U.S..

U.S. regulators began to take notice when Big Four audit industry leadership claimed, in testimony in the House of Lords in November of 2010, to have been ordered to stand down and not issue going concern warnings on the major banks that failed and were nationalized. In response, the PCAOB’s Investor Advisory Group (IAG) raised the issue of the auditors’ role in the crisis and requested deeper study. It remains to be seen if that study will be completed by the IAG or another group, but just the fact the issue was raised, and so pungently by so many, meant that the auditors’ “good crisis” was, perhaps, over.

The PCAOB, at least, has taken up the challenge of responding to investors’ concerns about the value of the audit report, the role of the audit industry in the crisis and the profession’s role in preventing another one. The audit report itself, in spite of the profound changes in the business environment, has changed very little in the last forty years. In the meantime, frauds, Ponzi schemes, business failures and various other financial calamities continue to occur all over the world with increasing frequency and little or no warning from the auditors. The PCAOB has issued a Concept Release on the subject and is expecting comments from all fronts.

A few other reforms are less dramatic but equally likely to elicit strong feelings on all sides.

Auditor rotation is a suggestion that comes up over and over with no resolution. The Financial Times’ Agenda (subscription only) explored the pros and cons of the issue. I was quoted and so were a few other notables such as Denny Beresford, who currently chairs the Audit Committees at Fannie Mae and Legg Mason.

I get the last word with this quote:

But even Francine McKenna, an outspoken critic of the industry, does not advocate mandatory term limits. “In a perfect world, if we had enough firms and if we had enough capacity and ability to go around, then it would be a wonderful idea,” she says. “But I think, practically speaking, it would make things worse. Trading one potentially corruptible firm for another potentially corruptible firm doesn’t really help.”

Instead, McKenna advocates radically changing the industry structure. “My personal feeling is we’re not going to get a good audit until we take it out of the companies’ hands and put it into the hands of an agency that controls the fees and controls who does the work,” she says. “You can’t have companies paying for audit firms directly.”

Another perennial favorite audit reform straw man is audit partner signatures on audit reports. I wrote a column about it at Forbes.com this week.

As usual, I think the proposals never go far enough – more likely a feature rather than a bug  - and that’s why they end up spinning, eventually, down the drain.

The PCAOB approved Auditing Standard No. 7, Engagement Quality Review on July 28, 2009. They also issued a Concept Release on requiring the engagement partner to sign the audit report.

The suggestion was not a new one. On October 14, 2009, the PCAOB’s Standing Advisory Group (SAG) discussed the concept release and the comments that were received.

Auditors have traditionally opposed individual partner signatures for audit reports arguing the engagement partner is already known to the client audit committees and partners already hold themselves accountable to their own own high standards of professionalism and accountability. Those professional standards are supplemented by mechanisms that are in place to allow third parties to hold them accountable.

Like lawsuits.

The comment period closed September 11, 2009 and boy oh boy were there a lot of comments. The audit firms arrived en masse to denounce the proposal. Jim Hamilton’s World of Securities Regulation had a great summary of their arguments.

Whenever there’s talk again of reforms, the audit industry uses fear of catastrophic liability and higher fees to inure alignment with their clients – rather than shareholders the auditors view the public company executives who hire them as their client – and to scare everyone else into leaving sleeping dogs lie.

When discussion of these reforms started to gain momentum in the U.K. earlier last year, the first thing out of the industry’s mealy mouths was liability caps. I suppose worrying about no moral compass is moot if there’s moral hazard.

The Standing Advisory Group (SAG) discussion of the concept release in October 2009 highlighted that previous panels and studies had raised the suggestion before, the objections were always the same, and nothing ever came of it. The SEC put together a group in 2008 to streamline financial reporting that touched on audit industry issues. The Treasury’s Advisory Committee on the Auditing Profession (ACAP), a panel formed after the Enron scandal, also delivered recommendations in early 2008.

Gaylen Hansen: During the Treasury Committee proceedings and the testimony, the investors felt very, very strongly about this…We’ve been over these arguments. I didn’t hear any new arguments in the comment letters that we’ve heard during the testimony that came before ACAP or in the discussion that we had last year, or maybe it was the last SAG meeting, on this particular issue. But we’ve been doing what we have for the last hundred years…

The Concept Release on Requiring the Engagement Partner to Sign the Audit Report is still on the PCAOB standards setting docket. No further public action has been taken on it since 2009.

Please go to the Forbes.com article, “Auditors and Audit Reports: Is The Firms’ ‘John Hancock’ Enough?” for my suggestion.

Hint: It’s something like what they do with sex-offenders.

Main page photo courtesy of The Guardian UK.