May 2024 financial reporting, governance, and risk management

| 5/15/2024
May 2024 financial reporting, governance, and risk management

Message from John Epperson, Managing Principal, Financial Services

Dear FIEB readers,

After several years of serving as the managing principal for Crowe financial services, I am excited to turn the reins over to our next leader. It is my pleasure to introduce you to Brook Behm, the newly appointed managing principal of Crowe financial services.

Brook is a dynamic leader who brings energy and a deep-seated passion for addressing the strategic issues that our financial services clients prioritize. His insights and innovative approach make him an exceptional choice to lead our dedicated team of Crowe financial services professionals and advance a prosperous future within the financial services community. As for me, I am eagerly stepping into a new role as Crowe chief risk officer. I look forward to continuing to serve our firm and our clients in this new capacity, focusing on managing and mitigating risks to contribute to our sustained success.

Over the past month, a focus on commercial real estate (CRE) is emerging from several angles, including the Fed’s financial stability report, the Kansas City Fed’s bulletin, and the Public Company Accounting Oversight Board report on CRE auditing considerations. The latter includes proposed questions for auditors to ask management as well as information on audit committee communications. Also, the Center for Audit Quality issued institutional investor survey findings and a report on generative artificial intelligence, which identifies principles and risks.

May brings graduates embarking on new challenges and opportunities. Similarly, financial reporting, governance, and risk management evolve and introduce new challenges and opportunities for our readers. We are pleased to keep you informed as these developments occur. For you to learn the latest, we are hosting peer groups in June, so I hope you will join us for what is always a lively dialogue.

Sign up to receive updates on accounting, governance, risk management, and compliance issues.
From the federal financial institution regulators

Federal Reserve issues financial stability report

On April 19, 2024, the Federal Reserve (Fed) issued its semiannual report on the stability and vulnerabilities of the U.S. financial system. The report notes the Fed’s assessment of overall continued resilience of the banking system, citing risk-based capital ratios well above regulatory requirements, high levels of liquid assets and stable funding of domestic banks, declining levels of private debt relative to gross domestic product (GDP) approaching historical averages, and modest levels of household debt relative to GDP. Conversely, the report also cites continued vulnerabilities arising from significant fair value losses on fixed-rate assets, funding pressures due to uninsured deposit levels, and strains in commercial real estate (CRE), among other factors.

The report summarizes responses to a survey by the Federal Reserve Bank (FRB) of New York on near-term risks to U.S. financial stability, including inflation and monetary tightening, policy uncertainty, commercial and residential real estate, banking sector stress, and fiscal debt sustainability. Notably, 60% of respondents cited policy uncertainty as a stability risk, compared to 24% in the previous report published in October 2023.

In addition, the report includes an analysis of the beneficiaries of – and the liquidity provided by – the Bank Term Funding Program, established by the Fed in the wake of the failures of Silicon Valley Bank and Signature Bank in early 2023.

Fed governor speaks on proposed regulations and challenges for banks

On April 18, 2024, at the New York FRB’s regional and community banking conference, Fed governor Michelle Bowman spoke on the challenges faced by banks and on evolving supervisory expectations. Bowman described the current environment as an inflection point, citing the prevalence of continuing traditional risks like rising inflation and interest rates, alongside emerging risks such as third-party risk and cybersecurity risk. She urged banks to innovate responsibly and ensure that their risk management frameworks continue to evolve to address these risks. In addition, she encouraged regulators to support banks’ responsible innovation while fulfilling their regulatory oversight responsibilities.

Emphasizing the importance of maintaining and testing contingency funding plans, Bowman stated that liquidity planning should include access to all sources that can be used in time of need – such as borrowing from the discount window if warranted. She also stated that supervisors should not act as members of a bank’s management team, nor should they interfere in management’s decision-making process.

Finally, Bowman commented on the responsibility of supervisors to conduct efficient, effective, and consistent supervision and establish clear expectations and processes. She urged supervisors to maintain a focus on the core and emerging risks to the financial system amid the high volume of recent regulatory reforms and proposals.

Kansas City FRB issues bulletin on commercial real estate exposures

On April 18, 2024, economists at the Kansas City FRB issued a bulletin detailing their findings on CRE risks. While noting that investors might focus on loan concentration to assess risk exposure, the economists highlighted other factors that significantly affect a bank’s exposure to CRE lending risk. Such factors include a bank’s underwriting practices, monitoring of existing borrowers, and capital and loan loss provisions. The report includes additional discussion on the risk associated with characteristics of underlying properties, such as property class, size, and geographic location.

FinCEN updates beneficial ownership FAQ, addressing timeline for access to BOI database

On April 18, 2024, the Financial Crimes Enforcement Network (FinCEN) updated its list of FAQ on beneficial ownership information (BOI), adding responses on the applicability of BOI reporting requirements, the request and use of BOI, and other topics. Specifically, the new FAQ clarify that a previously exempt entity that loses its exempt status in 2024 will have until 2025 to file an initial report. In addition, access to BOI by authorized recipients will begin with a limited pilot program for select federal agency users in spring 2024. Access will be phased in for various offices and agencies until the fifth phase extends access to applicable financial institutions in spring 2025.

CFPB reports on mortgage servicing

On April 24, 2024, the Consumer Financial Protection Bureau (CFPB) issued its supervisory highlights report on mortgage servicing, covering examinations completed from April through December of 2023. The report summarizes supervisory findings of what the CFPB deems exploitative and unlawful “junk fees”; unfair, deceptive, and abusive acts or practices (UDAAP); and other regulatory violations. Such findings include unfair charges for property inspections and late fee overcharges, deceptive loss mitigation and delinquency notices, inadequate fee descriptions, and lack of compliance with loss mitigation rules, among other issues. The CFPB continues to scrutinize junk fees and UDAAP. It also is considering a proposal to simplify and streamline mortgage servicing rules.

Agencies issue guide on third-party risk management for community banks

On May 3, 2024, the Fed, the Federal Deposit Insurance Corp. (FDIC), and the Office of the Comptroller of the Currency (OCC) jointly issued “Third-Party Risk Management: A Guide for Community Banks” to help community banks identify, monitor, and manage risks arising from third-party relationships. The agencies remind institutions that engaging a third party does not diminish or remove a bank’s responsibility to operate in a safe and sound manner and comply with applicable legal and regulatory requirements.

The guide includes risk management and governance considerations, an explanation of the third-party relationship life cycle with illustrative examples, and additional resources for community banks when developing and enhancing their third-party risk management practices. The agencies have provided the guide as a complement to existing guidance, including the interagency policy statement on third-party relationships issued in June 2023.

Agencies revise proposal on incentive-based compensation arrangements

On May 6, 2024, the FDIC, OCC, and Federal Housing Finance Agency (FHFA) jointly issued for public comment proposed rulemaking on incentive-based compensation arrangements. On the same date, the National Credit Union Administration (NCUA) issued a press release indicating that the agency will act on the proposal in the near future.

First proposed in 2016, it would place prohibitions on incentive-based compensation arrangements that do not “appropriately balance risk and financial rewards” or that otherwise fail to support appropriate and effective risk management and corporate governance. It also introduces additional recordkeeping and disclosure requirements to allow for enhanced risk monitoring and identification by federal regulators.

The proposed rule uses a tiered approach and identifies three categories of covered financial institutions based on average total consolidated assets – from $1 billion to less than $50 billion, from $50 billion to less than $250 billion, and $250 billion and greater – with the largest institutions subject to the most prescriptive requirements.

Under Section 956 of the Dodd-Frank Wall Street Reform and Consumer Protection Act, this regulation would require joint issuance by the FDIC, OCC, FHFA, NCUA, Securities and Exchange Commission (SEC), and the Fed. Once the proposed rule is adopted by all six agencies, it will be published in the Federal Register with a comment period of 60 days. Until then, each adopting agency has indicated that the proposal is available for public review and comment through their respective websites.

From the Securities and Exchange Commission (SEC)

SEC enforcement director speaks at PCCE spring conference

On April 15, 2024, Division of Enforcement Director Gurbir Grewal spoke at the spring conference held by the Program on Corporate Compliance and Enforcement (PCCE) of New York University School of Law. Focusing on recent market interest in the use of artificial intelligence (AI), Grewal stated that regulators and compliance professionals should be wary when investor interest in a particular technology or opportunity creates incentives for companies to misrepresent their strategy or activities. Just as with claims related to environmental, social, and governance (ESG) activities, a company’s AI-related disclosures must not be materially false or misleading.

Grewal emphasized the importance of proactive compliance through continuous education on AI risk, developments, and enforcement; engagement with personnel throughout the company to understand the use and impact of AI; and execution of company-specific AI policies, procedures, and internal controls. Grewal alluded to individual liability, drawing parallels to the agency’s enforcement approach in cybersecurity disclosure failures, and emphasized that the agency considers good faith efforts in determining its enforcement approach.

SEC holds annual Small Business Forum

From April 16-18, 2024, the SEC held its 43rd Annual Small Business Forum, with sessions focused on successes achieved and challenges faced by small-business founders and funders; investing in early-stage companies and building ecosystems; and lessons learned by small-cap companies on going and staying public. Chair Gary Gensler and commissioners Mark Uyeda, Hester Peirce, and Jaime Lizárraga made remarks.

SEC issues second fee rate advisory for 2024

On April 17, 2024, the SEC announced its second fee rate increase this year, raising the fee rate payable to the SEC by self-regulatory organizations to $27.80 per million for covered sales, up from the existing rate of $8 per million. The new rate will take effect for covered sales occurring on charge dates on or after May 22, 2024.

SEC debuts report on registered fund statistics

On April 24, 2024, the SEC staff published a new registered fund statistics report based on data from SEC-registered funds that file on Form N-PORT. The report will be published quarterly and will include both public and nonpublic data on an aggregated basis, including trends related to portfolio holdings, flows and returns, interest rate risk, and other exposures across registered funds.

From the Public Company Accounting Oversight Board (PCAOB)

PCAOB reports on CRE auditing considerations

On May 6, 2024, the PCAOB issued a new staff report, “Spotlight: Auditing Considerations Related to Commercial Real Estate,” on the current industry environment, audit and interim review considerations related to CRE, communications with audit committees, and evaluation of the results of the audit. The report includes a series of questions that auditors might consider when identifying and assessing risks, including fraud risks. The report also has reminders related to asset impairment and allowance for credit losses as well as going concern.

PCAOB issues report linking root cause analysis and audit quality

The PCAOB on April 30, 2024, issued a staff report, “Spotlight: Root Cause Analysis – An Effective Practice To Drive Audit Quality,” identifying root cause analysis as an effective practice for firms to drive audit quality. The report strongly encourages firms to assess the underlying root causes of a deficiency so that the deficiency can be effectively addressed and ultimately remediated and eliminated.

In addition, the report addresses general considerations related to root cause analysis, observations about root cause analysis from PCAOB inspections, and questions for audit firms to consider. The report identifies the key characteristics of a well-designed root cause analysis process: a dedicated team, guidance and training, data gathering and tools, scope, level of analysis, prioritization, conclusions, and monitoring remedial actions and reporting.

Audit committees and others charged with governance might consider an audit firm’s root cause information useful as they discuss past inspection deficiencies, the causes of those deficiencies, corrective actions taken to address identified deficiencies, and preventive measures a firm has taken to improve its audit quality going forward.

PCAOB reports observations on auditor’s use of data and reports

On April 18, 2024, the PCAOB released a staff report, “Spotlight: Inspection Observations Related to Auditor Use of Data and Reports,” which highlights recent staff observations on the use of information produced by the company (IPC) and information from external sources in the audit. The report provides examples of common audit deficiencies and good practices as well as reminders for auditors related to testing the accuracy and completeness of IPC and information from external sources and evaluating the relevance and reliability of audit evidence.

PCAOB Standards and Emerging Issues Advisory Group meets

The PCAOB’s Standards and Emerging Issues Advisory Group livestreamed a meeting on May 9, 2024. Topics included a standard-setting update, emerging issues in auditing subcommittee presentation on fraud recommendations, a two-part fraud panel discussion, breakout sessions on key fraud topics, and considerations of the internal audit function. Video of the meeting is available on the PCAOB’s event page.

PCAOB holds Investor Advisory Group meeting

On April 24, 2024, the PCAOB held a virtual meeting of its Investor Advisory Group. The meeting included a standard-setting update, an update from the Division of Registration and Inspections, a presentation on AI, and a discussion of critical audit matters. A recording is available on the PCAOB’s event page.

PCAOB names director of Registration and Inspections

The PCAOB on April 15, 2024, named Christine Gunia as the new director of the Division of Registration and Inspections. She joined the PCAOB in 2004 and has been serving as acting director since October 2023. She will oversee audit firm registrations and inspection of all domestic and foreign accounting firms that audit issuers whose securities trade in the U.S., and she will oversee audits of SEC-registered broker-dealers.

From the Center for Audit Quality (CAQ)

CAQ publishes findings from institutional investor survey on climate-related disclosure rules

On April 22, 2024, the CAQ released its second quarter survey of institutional investors, focusing primarily on investor perspectives on climate-related disclosures’ role in decision-making and the SEC’s recent final rule on such disclosures. It offers these results:

  • 91% of respondents assessed climate-related disclosures to be “very” or “extremely” important to their firm’s investment decisions; 83% said the SEC should have requirements for climate-related disclosures because these disclosures are important to investors evaluating a company as an investment opportunity.
  • 86% of respondents said they trust a publicly traded company’s climate-related disclosures “a great deal” or “completely.”
  • 94% of respondents agreed that publicly traded companies should have their climate-related disclosures audited and assured by a third party. Overall, respondents identified specialized consulting firms and federal agencies as the most qualified parties to do so, and 91% said they would be “extremely” or “very” confident in climate-related disclosures assured by a public company audit firm using environmental experts.
  • Respondents cited public and investor skepticism (48%) and lack of standard methodologies and metrics (46%) as the primary obstacles to confidence in audit firms providing assurance of climate-related disclosures.

CAQ publishes report on generative AI (GenAI)

In April 2024 the CAQ published “Auditing in the Age of Generative AI,” which “explores some fundamental principles of [GenAI,] new risks arising from its use in processes relevant to financial reporting … or internal control over financial reporting, … and related audit implications.”

The document covers the following topics related to GenAI:

  • Where does GenAI fit with other AI technologies?
  • How does GenAI work?
  • Why and how are companies deploying GenAI?
  • How does GenAI compare to other automation technologies?

The report also addresses the regulatory environment, including an overview of some of the existing and emerging regulations and voluntary frameworks related to AI, audit considerations for companies deploying GenAI, and example use cases.

 

Portions of AICPA materials reprinted with permission. Copyright 2024 by AICPA.

FASB materials reprinted with permission. Copyright 2024 by Financial Accounting Foundation, Norwalk, Connecticut. Copyright 1974-1980 by American Institute of Certified Public Accountants.

Contact us

Sydney Garmong
Sydney Garmong
Partner, National Office
Dennis Hild
Dennis Hild
Principal, National Office
Mark Shannon
Mark Shannon
Partner, National Office