The Center for Audit Quality (CAQ) is an interesting organization. Affiliated with the AICPA and holding themselves out to be an independent and objective advocate for quality in external audits, they periodically hold meetings on topics of interest to governance, risk management, and assurance practitioners. I have attended a couple of meetings as a representative of The IIA and found the attendance to be high-quality and the discussions meaningful.
In March, CAQ held one of their workshops on the topic of the "evolving role of the [external] auditor." They summarized the results in this report (PDF).
The most interesting aspect for me is the 'dog that didn't bark' (for Conan Doyle fans): they didn't discuss (or at least reference in the report) any concerns with the quality of the external auditors' work. Perhaps they see that as being sufficiently aired in Congress, by the US regulators, and in the UK House of Lords!
Instead, they focused on whether the external auditors should add value to investors by providing more information (reports or opinions) on such matters as management's discussion and analysis (MD&A).
The one theme that caught my eye is a clear concern among those attending the workshop that the financial reports should provide a clear picture of the organization's results and condition. The report references the value of non-GAAP information — even in preference to numbers that comply with GAAP — and that complex accounting regulations muddy investors' view of results.
The auditor's report that is included in the filed financial statements includes an opinion as to whether they are fairly presented in conformity with GAAP. But if the GAAP presentation is not what investors most find useful, perhaps the answer is not that the auditors should provide additional reports (such as on the MD&A) but that the complexity of GAAP and financial reporting in general is a problem.
What do you think of these suggestions?
- Management should be required to explain the metrics they use to manage the business, disclose them, assert to their accuracy, and explain whenever they change them. In particular they should disclose whether these are consistent with the measures used to determine executive compensation.
- The audit committee should assert that they have reviewed the above and are satisfied with the accuracy of the disclosure. They should also confirm that they believe the financial statements, taken as a whole with the non-GAAP disclosures, provide a true and fair view of the company's results and position.
- As is the case in many nations, the financial statements should include representations by management that have been reviewed by the board as to the condition of risk management and internal control (which is not limited to the financial statements but includes controls over all areas of significant risk to the organization). I would not ask for an opinion on these topics from the external auditors.
- The audit committee should confirm that they have reviewed and obtained assurance on both the independence and the quality of the global external audit team.
I welcome your comments.