COSO Committee of Sponsoring Organizations of the Treadway Commission
Principle 2. The board of directors demonstrates independence from management and exercises oversight for the development and performance of internal control.
The following points of focus highlight important characteristics relating to this principle.
-
Establishes Oversight Responsibilities—The board of directors identifies and accepts its oversight responsibilities in relation to established requirements and expectations.
-
Applies Relevant Expertise—The board of directors defines, maintains, and periodically evaluates the skills and expertise needed among its members to enable them to ask probing questions of senior management and take commensurate actions.
-
Operates Independently—The board of directors has sufficient members who are independent from management and objective in evaluations and decision making.
-
Provides Oversight for the System of Internal Control—The board of directors retains oversight responsibility for management's development and performance of internal control:
-
Control Environment—Establishing integrity and ethical values, oversight structures, authority and responsibility, expectations of competence, and accountability to the board
-
Risk Assessment—Overseeing management's assessment of risks to the achievement of objectives, including the potential impact of significant changes, fraud, and management override of internal control
-
Control Activities—Providing oversight to senior management in the development and performance of control activities
-
Information and Communication—Analyzing and discussing information relating to the entity's achievement of objectives
-
Monitoring Activities—Assessing and overseeing the nature and scope of monitoring activities and management's evaluation and remediation of deficiencies
Approach: Establishing the Roles, Responsibilities, and Delegation of Authority of the Board of Directors fn 8
• Establishes Oversight Responsibility
Applies Relevant Expertise
• Operates Independently
• Provides Oversight for the System of Internal Control
The roles, responsibilities, and powers of delegation of the board of directors are defined in its corporate bylaws and committee charters in accordance with applicable regulatory and listing requirements. For external financial reporting purposes, the board typically forms an audit committee whose responsibilities include overseeing:
-
The effectiveness of internal control over external financial reporting, including the assessment of risks, significant deficiencies, and material weaknesses (if any)
-
Management's assessment of any significant matters, considering the potential impact on financial reporting and need for corrective action
-
The establishment of formal communication with management of the internal audit function to facilitate discussion of any sensitive issues
-
The quality of financial reporting and disclosures
-
The hiring of and payment to the external auditor
Audit committee members typically demonstrate independence of thought and substance by absence of any material financial or other personal ties to the company, which could impede their ability to provide unbiased guidance and oversight.
The responsibility of the board and audit committee is to oversee management's performance of internal control. The board must therefore retain objectivity in relation to management.
Every year, the board of directors of Northern Power, a distributor of electricity, commissions an effectiveness evaluation of its audit committee. An independent consultant with expertise in governance reviews the means by which the audit committee fulfills its responsibilities, as set out in its charter. Specifically, it evaluates how the members of the audit committee:
-
Oversee the quality and reliability of financial reporting and disclosures
-
Understand the key risks facing the organization and the processes management uses to identify, assess, and manage risks, considering internal audit findings, litigation, compensation schemes, regulation, and compliance
-
Evaluate organizational behavior, culture, and adherence to standards of conduct
-
Challenge management and the external auditor in determining materiality for financial reporting purposes
-
Assess reasonableness and appropriateness of critical accounting policies of the company
-
Confirm or reject the basis for management estimates and proposed accounting policy changes before approving
-
Evaluate, retain, or change external auditors
-
Review audit plans
-
Review management's assessment of internal control over external financial reporting
The results of the evaluation are used to determine whether the roles and responsibilities of the committee have been met and could result in committee member changes or impact remuneration. In addition to the annual review, every three years the company conducts a benchmark review against leading practices and refines its charter, as appropriate.
Public Aid is a governmental agency that is subject to oversight by various bodies, representing knowledgeable and independent officials. In terms of its financial reporting, key roles include the following:
-
The organization's deputy head is responsible for assuming overall stewardship for the integrity of the agency's financial management capabilities, and for signing off on all key external financial management representations and disclosures, including the Statement of Management Responsibility Including Internal Control over Financial Reporting.
-
An audit committee, whose chairman is responsible for ensuring that the committee acts as an independent and objective advisor to the deputy head and provides guidance on the adequacy of the agency's system of internal control, financial reporting and disclosures.
The comptroller general is responsible for providing government-wide functional direction and assurance for financial management and stewardship over public resources, as assigned by the Treasury Board, in collaboration with other central agencies. He provides oversight of government-wide financial information systems and quarterly financial reporting. He monitors the qualifications and competence of the financial management community across government for all aspects of financial management and reports periodically to the Treasury Board on the state of financial management across government agencies.
• Establishes Oversight Responsibility
Applies Relevant Expertise
Operates Independently
• Provides Oversight for the System of Internal Control
The board of directors reviews and approves policies and practices that support the performance of internal control across the business in regular meetings between management and the board. The processes and structures particularly relevant to the audit committee of the board are those that provide:
-
Appropriate forums to enable board members to ask probing questions of management
-
A calendar that establishes the timing and frequency of meetings with management
-
Expected practices to keep board members current on both emerging and adopted accounting standards and their impact on the entity's financial statements
-
Procedures to review management's development and performance of internal control over external financial reporting
-
Authority to engage experts as needed and oversight to ensure that management appropriately resolves matters raised by the board
-
Criteria and procedures for calling special and/or urgent meetings as necessary
-
Allocation of time in board meetings for discussions with external advisors, internal and external auditors, and legal counsel without management being present
The policies and practices are updated as needed to reflect changes in internal and external expectations, including rules and regulations.
The audit committee of Outer Limits Innovations, an aerospace control systems supplier, uses its charter as guidance when setting its meeting dates and agendas. Fred Krahn, the chair of the committee, plans for at least one meeting during the year at which each responsibility set forth in the charter is discussed. This practice helps the audit committee to cover all relevant responsibilities and management to anticipate and plan for the committee's expectations. The meeting calendar, which is shown below, is periodically reassessed to adjust for emerging regulatory and technical matters that could affect the company or the industry.
Frequency | Planned Meeting Quarter | |||||||
---|---|---|---|---|---|---|---|---|
Audit Committee Issues | A | E | AN | 1 | 2 | 3 | 4 | |
Report of results of annual independent audit to the board | ✓ | ✓ | ||||||
Appointment of the external auditor | ✓ | ✓ | ||||||
Approval of external auditor fees for upcoming year | ✓ | ✓ | ||||||
Review of annual proxy statement audit committee report | ✓ | ✓ | ||||||
Assessment of the adequacy of audit committee charter | ✓ | ✓ | ||||||
Approval of audit committee meeting plan for the upcoming year, confirm mutual expectations with management and the auditor | ✓ | ✓ | ||||||
Audit committee self-assessment | ✓ | ✓ | ||||||
Approval of guidelines for engagements of external auditors for other services (pre-approval policy) | ✓ | ✓ | ||||||
Approval of any non-audit services provided by outside auditors | ✓ | |||||||
Report of external auditor pre-approval status/limits | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Review of procedures for handling financial reporting errors or irregularities | ✓ | ✓ | ||||||
Oversee fraud risk assessment process | ✓ | ✓ | ||||||
Review the charter of the internal audit function | ✓ | ✓ | ||||||
Review the internal audit plan | ✓ | ✓ | ||||||
Approval of minutes of previous meeting | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Report quarterly matters to the board (chair) | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Schedule executive session of committee members | ✓ | |||||||
Schedule executive sessions with the chief audit executive | ✓ | ✓ | ✓ | |||||
Other matters | ✓ | |||||||
Financial Management | ||||||||
Annual report, 10-K, and proxy statment matters | ✓ | ✓ | ||||||
Quarterly report earnings review with managment and external auditor, pre-approval of external auditor professional activities | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Assessment of system of internal control | ✓ | ✓ | ||||||
Status of significant accounting estimates, judgments and special issues (e.g., major transactions, accounting changes, SEC issues) | ✓ | |||||||
Other matters (adequacy of staffing, succession planning, etc.) | ✓ | |||||||
A = Annually E = Each Meeting or Conference Call AN = As Necessary |
The audit committee of Millennium Lighting, a manufacturer of lighting and ventilation equipment, is chaired by Janis White, a CPA with financial reporting expertise and previous public accounting experience. Ms. White regularly distributes to the committee members any updates from management on technical matters, such as new accounting standards or developments affecting the company and related financial statement implications.
Before each committee meeting, she circulates the draft agenda both to the committee members and the external auditors to solicit their input on any additional technical accounting agenda items they would like to discuss. Ms. White is committed to keeping open channels of communication with the external audit engagement partner and the company's chief audit executive to ensure she receives timely updates on any discussions occurring with management as technical matters emerge. Internal audit, litigation, and corporate social responsibility are a few of the areas that are regularly solicited for input by the board or audit committee.
Establishes Oversight Responsibility
• Applies Relevant Expertise
• Operates Independently
Provides Oversight for the System of Internal Control
The board of directors periodically assesses and confirms its collective ability to provide effective oversight. Through independent review and self-assessment it determines the adequacy of its composition, whether it has sufficient independent members, and the appropriate expertise.
To meet the entity's external financial reporting objectives, the board of directors identifies certain board candidates who are independent of both management and the entity and who have requisite financial reporting and other relevant expertise. These members are typically assigned to the audit committee. fn 9 Such expertise may be established through professional networks and organizations and by educational institutions whose missions are aligned to the advancement of the financial reporting profession.
The board reviews the results of due diligence performed on potential board candidates and confirms their competence and ability to remain unbiased. The procedures to ensure that potential board members meet the defined criteria may include:
-
Evaluating the key risks facing the organization and accordingly defining board member profile requirements
-
Performing background checks and obtaining independent references
-
Reviewing current affiliations and directorships to ensure independence relative to management and the entity
-
Considering skills and expertise, ranging from financial to regulatory and various technical knowledge needed to understand the issues that could affect the company's external financial reporting
-
Validating that any credentials and certifications held demonstrate an achieved competence level
-
Reviewing information about financial and other relationships with the company, its external auditors, or management
-
Using an independent nominating committee or search firm to oversee due diligence procedures
-
Evaluating periodically the due diligence procedures used for identifying potential directors, including checking that an individual director's certifications are complete, up-to-date, and comply with the entity's ethics guidelines and independence rules
Giante Ore is a mining exploration company whose shares are traded on an "over-the-counter" bulletin board. Giante Ore has long maintained a board of directors that includes three of the CEO's family members and three outside, but not independent, directors: the company's outside legal counsel, a venture capitalist, and a personal friend of the CEO.
Giante Ore recognized that it needed to strengthen its control environment and board effectiveness. To that end, it revisited its board structure. The three relatives and one personal friend of the CEO left the board and have been replaced by four independent directors, all of whom are financially literate. One of the four has specific financial expertise. These directors have now been appointed to a newly formed audit committee with its responsibilities set forth in a charter.
When Greene Inc. needs to identify new members for its board, it follows a detailed procedure to ensure the best possible candidates are chosen. The nominating committee works with the human resources department, the legal department, and an independent executive search firm to identify candidates and conduct due diligence in support of the interest of the company in its short- and longer-term objectives. The key skills it has identified are financial literacy, liquidity risk management expertise, business continuity planning, and corporate social responsibility reporting experience that reflects the business performance expectations of the company's stakeholders.
The same team conducts an annual review to ensure that board members continue to have the requisite competence and independence given the entity's stakeholder needs. The senior management of Greene Inc. provides the results of the review in its public filings.
Establishes Oversight Responsibility
• Applies Relevant Expertise
Operates Independently
• Provides Oversight for the System of Internal Control
The board demonstrates an appropriate level of skepticism of management's assertions and judgments that affect financial reporting by asking probing questions. In particular, the audit committee of the board seeks clarification and justification of the company's process for:
-
Selecting and implementing accounting policies
-
Determining critical accounting estimates
-
Making key assumptions used in the application of technical accounting and reporting matters
-
Evaluating other risks facing the organization, with the potential impact on financial reporting
Custom Engineering manufactures specialty polymer products. The audit committee meets regularly with management to review the reasonableness of management's assumptions and judgment used to develop significant estimates. The committee then meets privately with the external auditor to discuss its assessment of management's estimates and the related impact on financial reporting.
This practice is carried out for all assumptions related to key financial statement accounts, disclosures, and relevant assertions most subject to management judgment and bias. For example, for Custom Engineering's annual goodwill evaluation, management provides relevant information on any specialists engaged to assist the company, key judgments and assumptions included in the company's discounted cash flow model, plausible sensitivity scenarios that were considered, and confirmation of the appropriate technical accounting standard applied.
Establishes Oversight Responsibility
Applies Relevant Expertise
Operates Independently
• Provides Oversight for the System of Internal Control
The audit committee of the board meets regularly with internal and external auditors as well as independent reviewers, in private when necessary, to review and discuss such topics as:
-
Key risks facing the organization
-
Audit scope and testing plans
-
Basis for definition of materiality threshold
-
Changes in accounting policies
-
Assumptions in models and calculations
-
Resources and staffing
-
Organization and culture
-
Management's assessment of internal control over financial reporting
-
Significant audit findings
-
Quality and reliability of financial reporting and disclosures
Sara Greenburg is the chair of the audit committee of Seaworthy Solutions, a marine construction services provider. In accordance with the audit committee charter, she arranges for the committee to meet quarterly with the external auditor to discuss a wide range of issues such as audit scope, testing plans, internal control over external financial reporting, quality of financial reporting, and audit findings and recommendations. She is responsible for coordinating the audit committee's evaluation of the external auditor. She bases her evaluation on a number of considerations, including the firm's reputation, the qualifications of the audit partner and team, knowledge and experience in the company's industry, and the firm's quality control procedures. Ms. Greenburg believes that these interactions, supplemented as needed with interim conversations, effectively positions her to monitor the external auditor's performance and make an informed judgment on any need to modify or terminate the relationship.
The audit committee also regularly meets with Seaworthy's chief audit executive to ensure that the same oversight objectives of the internal audit function are attained. The chief audit executive reports directly to the audit committee to enable an objective mindset within the internal audit organization and to facilitate the escalation of issues independent of management, if so required.
Establishes Oversight Responsibility
Applies Relevant Expertise
Operates Independently
• Provides Oversight for the System of Internal Control
The audit committee considers information obtained from the company's whistle-blower and anti-fraud programs (or similar processes) to monitor the risks in misstatements in financial reporting. These may include risks of inappropriate acts by staff and management override of controls. The audit committee reviews any whistle-blower allegations and evaluates management's analysis of significant matters, potential impact on financial reporting, and corrective actions being taken.
Start-up Inc. is a privately held company that has grown rapidly and now faces heightened competition and declining margins. The owners have become increasingly concerned about the potential for fraud and management override to make quarterly results look more favorable and meet performance targets. In response, Human Resources has made a help line available to management and staff, and an external service provider now provides a hotline for anonymously reporting breaches of ethics and integrity that could impact external financial reporting. The owners review all allegations received, assign the cases for investigation, and review the findings to understand the motivations, opportunities, and rationalizations for management override and how those activities might be concealed, and to ensure prompt corrective action is taken.
Generation Now is an electricity transmission and distribution company that periodically receives calls on its whistle-blower hotline. The business ethics committee chaired by the general counsel reviews the logs of all calls and determines the appropriate course for follow-up action. Matters are opened and assigned to internal audit for investigation and proposed resolution by senior management and the board, as appropriate. Investigations are carried out by internal auditors or others who are independent of the issue. Every quarter, internal audit, working in conjunction with the general counsel, provides a status report of progress and proposed resolutions relating to each call. The board and management determine the final resolution and oversee any follow-up actions. fn 10
fn 8 In practice, many of the activities of the board of directors included here would be carried out by one of its committees, such as the audit committee.
fn 9 Standard setters, regulators, or listing agencies may have specific requirements for director independence, qualifications, and the makeup of the audit committee, which will vary by jurisdiction/country.
|
Copyright © 2013 – 2016 Committee of Sponsoring Organizations of the Treadway Commission and the American Accounting Association. All Rights Reserved. Use of materials is subject to COSO's Policy of Acceptable Use.
To access this page, please login with your COSO credentials using the button below:
Login to COSOPlease enter your COSO login credentials below
Please contact marybeth.gripshover@aaahq.org with any questions