
SEC passes new AS5 Sox auditing rules
Daily news headlines
The Securities and Exchange Commission (SEC) has voted unanimously in favour of the new Sarbanes Oxley (Sox) auditing standard proposed earlier in the year by the Public Company Accounting Oversight Board (PCAOB).
Although the vote was little more than a formality, the Commission’s acceptance of Auditing Standard No. 5 (AS5) is the last step in implementing a long-sought-for shift to less prescriptive auditing rules in the annual Sox compliance process.
AS5 was developed in tandem with the SEC’s own new management guidance for Sox, which seeks to make Section 404 audits and management evaluations more risk-based and scalable to a firm’s size and complexity.
The new procedures are intended to increase the accuracy of financial reporting while reducing unnecessary costs, especially for smaller public companies.
"This standard and the Commission's interpretive guidance for management represent the culmination of two years' work by the Commission and the PCAOB to make Section 404 more effective and efficient. I want to thank everyone for their work in addressing the concerns created by the unduly expensive and inefficient Auditing Standard No. 2," said SEC chairman Chris Cox.
Among the detail of the AS5, the mandatory requirements of the previous auditing standard have been reduced, allowing the auditor to focus on performing tests in those areas where, in the auditor's judgement, they’re actually necessary.
In a concession for audits of smaller and less complex companies, the auditor can reduce the amount of internal control testing and consider alternative controls. AS5 also directs auditors to those areas that present the highest risk and allows them to use knowledge accumulated in previous years' audits to reduce testing.
Both the SEC and PCAOB were lauded for their work by representative Barney Frank, chairman of the House Committee on Financial Services, although it seems unlikely the new rules will draw a line under the protests that have characterised the first five years of the Act.
Earlier this week, Nasdaq issued a statement calling for regulators to create an ombudsman to give firms recourse to complain if they feel they are been audited in an unnecessarily costly and time-consuming fashion. The stock exchange also claimed AS5 represented nothing more than “incremental progress”, in alleviating the compliance burden.
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Printing this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Copying this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
More on Operational risk
Power play: how geopolitics is shaping op risk at G-Sibs
Op Risk Benchmarking: Geopolitics is a top five fear for G-Sibs, but most banks lack specialist risk staff and classical tools
Automating regulatory compliance and reporting
Flaws in the regulation of the banking sector have been addressed initially by Basel III, implemented last year. Financial institutions can comply with capital and liquidity requirements in a natively integrated yet modular environment by utilising…
No tick-the-box approach to compliance risks
Op Risk Benchmarking: G-Sibs share fear of regulatory run-ins, but lack common stance on modelling, KRIs and more
Bread-and-butter op risks at the top table
Op Risk Benchmarking: As G-Sibs are forced to do more, how can they avoid doing more wrong?
Op Risk Benchmarking: Inside the G-Sibs
New initiative scrutinises op risk measurement and management practices at the world’s largest banks
Sizing cyber: banks split on who owns and measures hack threats
Op Risk Benchmarking: G-Sibs split on risk modelling and management for IT disruption and infosec
Banks frequently breach appetite for top op risks
Op Risk Benchmarking: Five G-Sibs breached appetite in past year across four risk types, new research reveals
Investment banks: the future of risk control
This Risk.net survey report explores the current state of risk controls in investment banks, the challenges of effective engagement across the three lines of defence, and the opportunity to develop a more dynamic approach to first-line risk control