I am pleased to have the opportunity to speak to you today. I am especially pleased to be in Maryland, the home state of Senator Paul Sarbanes.
As you know, Senator Sarbanes’ work led to the landmark law known as the Sarbanes-Oxley Act of 2002 and with it, the creation of the Public Company Accounting Oversight Board. We at the PCAOB will always feel an affinity for Senator Sarbanes and Congressman Oxley – kind of like they were our founding fathers.
Since I joined the PCAOB exactly a year ago this month, I have had many good and fruitful conversations with Senator Sarbanes – not just about the operations of this still-new organization, but about our personal aspirations for what the organization can accomplish and inspire.
I have been eager to meet the rest of you, and by "you" I mean each of you as individual CPAs. You will be the embodiment of the reforms that have occupied all of us over the past two years – whether we are accountants, regulators, or investors. I want to talk about the relationship I envision that we should and can have.
As you know, the PCAOB will have the closest relationship with the auditors of publicly traded companies. But I am optimistic that you who work as auditors and accountants for private companies and even private individuals will find some guidance for your practice as I describe the role and work of the PCAOB and why the Board came to be.
The true test of the reforms that Congress legislated – and the hope for restoration of confidence in the accounting profession – will depend neither on the organized profession nor on the new regulators, but rather on each of you.
There has been a lot of focus on what the Congress, the Securities and Exchange Commission, and the PCAOB and others have done to address the financial reporting failures of recent years, but the reality is that it is how you decide to respond that will make the difference. The PCAOB will be writing the rules for public company auditing, but it is still you who will be doing the auditing.
You have a choice before you. As individuals, you must ultimately decide how you wish to conduct yourselves – how you wish to be thought of by those with whom you live and work, and how you wish to be judged by history.
The Sarbanes-Oxley Act has already significantly changed the practice of auditing, and it is my view that the best course for you as auditors is to embrace that change and not to fight it. I am encouraged that a number of you have begun to do so. While change can be hard, resisting the groundswell of the public’s opinion is a losing proposition.
While my comments today are my own and are not those of the PCAOB, I think I can speak for my fellow Board members when I say that our objective is to help auditors find a new direction that will lead to the restoration of public confidence in auditing and in our markets.
We must have an end to bending rules – and principles – and return to a single-minded emphasis on presenting information fairly. The public needs a basis for confidence that those who invest in the financial markets will be treated fairly by the participants. You are the key to that confidence.
Few of us could have imagined three years ago that we would be where we are today, in a world in which accounting, auditing, and corporate governance would be subject to a strict new regime under the Sarbanes-Oxley Act.
The conditions that brought us to this point could be summed up as mass confusion.
We saw confusion about the role of the CEO. We saw the advent of the CEO superstar and an explosion in compensation that made those superstar CEOs actually believe that they were worth more than 400 times the pay of their average workers, an increase in the multiple by 10 times in 20 years – thoroughly unjustified, economically and morally.
We saw confusion about the importance of earnings reports. When the private sector pinned its success to a report and not to actual earnings, the end was in sight.
It became fashionable for public companies to encourage allegedly independent investment analysts to reach a consensus on the company’s quarterly and annual earnings, a consensus that was closely guided by the financial management of the company.
Then the market decided that the genius CEO was truly a genius if the company met or beat the estimate by a penny, but was a failure or a fool if the estimate was missed by a penny.
Now anybody with a memory knows that there is a business cycle, a product cycle and the law of gravity. However, if quarter after quarter you have to match or beat the last quarter's results to stay in favor, there is an immense incentive to cook the books.
And the books got cooked by company managements, all too often with the collaboration or collusion of bankers, investment bankers, lawyers, and, yes, even accountants, irrespective of the true cost to the nation, not to mention to the participants themselves. It was a sickness, a kind of moral blindness and lack of courage to do what is right, that threatened to strike at the very soul of our national confidence.
The shock wave started with Enron, then rolled through Adelphia, WorldCom, HealthSouth and others. The American people looked at the wreckage of our vaunted private sector, and they got angry.
The people got angry with the CEOs, with the boards, with the accounting profession and even with those of us in the regulatory sector. In a democracy, when people get angry, they will insist on change.
Congress and the President responded, and the result was the Sarbanes-Oxley Act of 2002. You have only to look at the size of the affirmative votes in Congress and the alacrity with which the President signed the bill into law to know that they heard the anger, too.
As President Bush said when he signed the bill, “For the first time, the accounting profession will be regulated by an independent board. This board will set clear standards to uphold the integrity of public audits . . . .”
Listen to those words. “Uphold the integrity of public audits.” They are important words. Instead of thinking of Sarbanes-Oxley as a long checklist of new requirements, you should think of it as a new source of strength.
We're going to have to work on developing and maintaining this strength. Accountability – not just to investors, but to the public at large – is what we must be about. Seldom have the stakes been higher for our markets.
Given the depth of the public anger, it surprises me that some participants in the financial system – including auditors and issuers – approach Sarbanes-Oxley as a list of burdensome new requirements whose primary attributes are extra costs and risks. Checking the boxes under the new requirements will in fact incur additional costs and extra risks, but merely checking boxes provides few real benefits.
Nor will “checking the boxes” fix the problems that the Congress and the President intended to address. Indeed, that approach misses the point and, in fact, diminishes the value of the audit.
If auditors cannot distinguish for investors financial reporting problems from financial downturns, then the audit function can be written off.
You have a chance of a lifetime to bring about significant change. You should accept that challenge, and you should do so knowing that you will not be alone. The PCAOB will be striving to create the new future with you.
Congress created the PCAOB as a non-profit, non-governmental organization. Our funding is provided by public companies. In addition to our headquarters in Washington, D.C., we have opened offices in New York, Atlanta, Dallas, and San Francisco, and we are preparing to open an office in Chicago. The regional offices will primarily support our inspections group, while our standards-setting, registration and enforcement groups will be based in DC.
I should also mention at this point that we are in the midst of a recruiting drive, to find qualified people for each of our offices.
We are looking for good, experienced accountants, and we are looking for the right spirit, too. That is, we want people who understand our mission: to oversee the auditors of public companies in order to protect the interests of investors and further the public interest in the preparation of informative, fair, and independent audit reports.
We now number a little over 200 hardy souls, working to fulfill the programs set out for us in the Sarbanes-Oxley Act: registration, inspection, enforcement and standards-setting.
Let’s start with registration. As most of you probably know, under the Sarbanes-Oxley Act and the Board's rules, it is now unlawful for any accounting firm to audit a publicly traded company without having registered with the PCAOB.
As of this week, 1003 firms are registered with the PCAOB, including 11 here in Maryland.
While registration is a prerequisite for accounting firms to continue their work as auditors of public companies, it is also the foundation, established in the Sarbanes-Oxley Act, for the PCAOB to perform its important functions of inspection and enforcement.
We began our inspections program last year – even before any firms were registered – by conducting, on a voluntary basis, limited procedures at the Big Four firms with an experienced team of auditors. Very soon, we will be making public our reports on those limited inspections.
At this time, we are conducting the regular inspections required every year for firms with more than 100 audit clients. There are eight firms in the United States that require annual inspections. Other firms will be inspected once every three years. And when the Board thinks circumstances warrant, we can order a special inspection, regardless of timing.
Our inspectors are looking for the compliance required in the Sarbanes-Oxley Act, that is, compliance with the Act, the rules of the Board and the Securities and Exchange Commission and professional standards.
Our inspectors are looking for the "tone at the top" of the firm. Does the managing partner – and the audit team leader – understand what is demanded of the accounting firm in this new era of regulation and oversight? What messages are being communicated by the leadership of the firm to its partners and professional staff? Do these messages show an understanding of the demands of the firm in this new era of regulation? Is it clear that audit quality is the firm’s number one priority?
The Board and our inspectors want to know if the message of "doing the right thing" is reaching the rank and file in the firms. Our inspectors talk to the managers, but they also talk to the least experienced members of the audit teams to find out if the message is reaching them. We look at how often and how well the message is delivered.
We also look at compensation and promotion. Are the best auditors rewarded for being the best auditors, or are they rewarded for something else? We also look at how clients are selected and how they are let go.
An important part of our 2004 inspections will involve reviewing a significant number of audit engagements.
In connection with those reviews we will focus on efforts to detect fraud, the adequacy of documentation, the evaluation of firm risk assessments, and compliance with professional auditing and accounting standards. We also plan to continue to focus on “tone at the top,” compensation practices, and other business practices that were the subject of our limited procedures in 2003.
In those instances where we find potential violations of the Sarbanes-Oxley Act, the securities laws, or the Board’s auditing and related professional standards, our enforcement group will conduct investigations by seeking documents and testimony from the firms and auditors involved. In addition, the Sarbanes-Oxley Act gives the Board the authority to seek documents and testimony from third persons, such as audit clients.
While our sanctioning authority extends only to registered firms and auditors, we will make referrals to government agencies, most commonly the SEC, when we find potential violations of law or applicable rules by others. We will also coordinate our investigations with SEC investigations as needed.
Finally, I want to tell you about our work on auditing standards. The Sarbanes-Oxley Act charged the Board with establishing auditing and related attestation standards; quality control standards; ethics standards, and independence standards.
The Board’s first action on standards was to adopt the existing AICPA standards as interim standards, pending review of those standards.
The Board determined not to designate a professional group of accountants to formulate auditing standards for the Board’s ultimate approval. Instead, the Board chose to form a staff of expert accountants to develop auditing and related professional practice standards at the Board’s direction.
For the first time, the people developing standards will have access to robust empirical and anecdotal evidence from our inspections – evidence that will cut through a cross-section of audits and firms – to set priorities and develop new standards.
Our standards-setting staff hail from a variety of backgrounds, including academia, professional practice and government. The Board will also be drawing on the expertise of a standing advisory group, which will meet next week for the first time. The group is composed of 30 individuals with experience in auditing, financial statement preparation, corporate governance and investing, as well as other relevant fields. The advisory group will help us as we examine the existing, interim standards for possible changes, and they will offer us expert advice as we consider other potential standards, such as those that would guide auditors’ communications with audit committees.
When we develop new standards, we intend to engage in a thoughtful and deliberative process. We will also seek the advice and input of our standing advisory group and other ad hoc task forces we establish. We expect to propose our standards for public comment.
When we are ready to adopt a standard, like all our rules, we will submit it to the SEC for approval under the Sarbanes-Oxley Act. We will post both proposed standards and adopted standards, as well as all written comments received on our proposals, on our Web site for all auditors and other interested people to review.
That is the process we followed for the first three auditing standards that we have adopted to date.
Auditing Standard No. 1 requires that audits of publicly traded companies be conducted in compliance with the standards of the PCAOB, replacing the previous reference to generally accepted auditing standards, or GAAS.
Auditing Standard No. 2 deals with auditors’ responsibilities to audit a company’s internal control over financial reporting. The Sarbanes-Oxley Act required the Board to develop this standard to complement the Act’s requirement that company management assess the quality of the company’s internal control.
Before we set out to write the standard, we examined the existing standard for audits of internal control, we held a roundtable discussion, and we examined the requirements set for banks in the Federal Deposit Insurance Corporation Improvement Act of 1991.
We proposed the standard in October, and we received robust feedback – 194 comment letters in all. We took the time necessary to digest these comments carefully because as I said at the beginning, internal controls are simply too important to treat lightly.
That’s one reason the Board determined that it was not enough to simply ask auditors to attest to and report on management’s assessment of a company’s internal controls. The Act clearly required more: that auditors determine for themselves that the internal controls are adequate to support reliable financial statements.
Our standard requires that an auditor perform the audit of the financial statements and the audit of internal control as part of one engagement – not so much as a cost- and time-saving measure but because each audit could have consequences for the other.
On another issue, auditors’ ability to rely on the work of others, the Board tried to strike an appropriate balance between the work that an auditor must do himself or herself, and the work performed by management, internal auditors and others that the auditor may use to support his or her opinion.
We require that an auditor obtain the principal evidence supporting his or her opinion through procedures performed by the auditor, including walkthroughs. That in no way says an internal auditor’s work lacks value, and we certainly do not want to discourage internal auditors from testing and evaluating internal controls, especially those related to the timely prevention and detection of fraud.
This approach should provide a strong incentive for companies to create strong and independent internal audit and compliance departments.
We expect internal auditors to possess a high degree of competence and objectivity with regard to internal control, and, subject to an appropriate evaluation of those factors, the outside auditor should be able to place a high degree of reliance on the internal auditors’ work.
Finally, the standard requires that auditors should make note of the effectiveness of the corporation's audit committee, including whether the committee is independent of management.
We expect that the SEC will approve Auditing Standard No. 2 some time this month.
Auditing Standard No. 3, dealing with the documentation that auditors are required to retain, was approved by the Board just last week. This standard is important not just because it is expressly required by the Sarbanes-Oxley Act, but because it is an integral piece of our effort to restore investor confidence in the audit process.
We know that the only thing that most investors see of an auditor’s work is the short, concise statement expressing the auditor’s overall opinion of the fairness of a company’s financial statements. But what inspires the faith of investors is their confidence that before the opinion was signed, the auditor poked, prodded and maybe even made a pest of himself or herself to be able to back up that opinion.
Auditing Standard No. 3 will solidify investors’ confidence in the work the auditor performed. Good documentation is a critical component of an effective audit.
Auditors’ work papers are also key to accounting firms' quality control over their audit engagements. Investors rely on more than just the words of the audit report, which are standard. They also rely on the name and signature on the report. A firm's reputation for quality auditing is the most important asset it has, and its audit documentation defends that reputation.
Firms and regulators, including our own PCAOB inspectors, test quality control by examining audit work papers to determine whether, in fact, audits are living up to the standard of quality for which the firm's name stands. Inadequate work papers are thus an early warning sign that audits may not be worthy of the firm's name, or investors' reliance. Work papers must be sufficiently specific to enable reviewers to understand the audit work performed, who performed and reviewed the work, and the nature of the audit evidence examined.
While the Sarbanes-Oxley Act requires auditors to follow our auditing standards only when they are performing public company audits, we hope that – like FASB's accounting standards – they will provide appropriate guidance in other contexts. While some public companies do go private, in many, many more cases private companies go public. In addition, stakeholders other than public investors – such as lenders – have already begun to require auditors to provide audit reports according to our standards.
For these reasons, we hope to develop a set of auditing standards that may be adopted and applied uniformly in a variety of contexts. With this objective in mind, the PCAOB will monitor closely the standards-setting of the International Auditing and Assurance Standards Board and the Government Accounting Office. We recognize the opportunity to serve the public interest by maintaining a constructive dialogue with these and other bodies with standards-setting agendas, such as the ASB, and we intend to do our part to facilitate that dialogue.
In addition, we intend to seek the views and involvement of small- and medium-sized firms and preparers in our own standards-setting projects – through the standing advisory group and through ad hoc task forces. I believe very strongly that we must do what we can to encourage small- and medium-sized businesses, because they are the true drivers of our economy.
I took this job a year ago because of the opportunity to make a difference, to do my part to help restore some of the confidence that people lost in our markets and our public companies.
I hope that is how you in the accounting profession will view the new regime of oversight represented by the PCAOB. We will ask a lot of you, and you will have to work harder than you could have imagined a year ago. We will pry into your records and your work habits, and, yes, the rules will change as we go along.
But you have an opportunity here that is undeniable. In the wake of Enron and Arthur Andersen, the accounting profession was weighed and found wanting, but it was also given a shot at redemption. You can chafe at what we ask of you, or you can accept the challenge for what it is.
What’s at stake for all of us is the trust of the American people in our markets and the companies that drive our economy. We have an opportunity to reclaim that trust. I, for one, am delighted to grab that opportunity. I hope you will join me.