One of the best ways to tackle financial statement fraud is to conduct periodic surprise audits. In fact, surprise audits were associated with at least a 50% reduction in both median loss and median duration, according to Occupational Fraud 2022: A Report to the Nations published by the Association of Certified Fraud Examiners (ACFE) earlier this year.

Surprisingly, however, less than half of respondents (42%) conduct surprise audits. So, numerous organizations have an opportunity to add this highly effective tool to their antifraud arsenal.

Cost of financial misstatement

Financial statement fraud happens when “an employee intentionally causes a misstatement or omission of material information in the organization’s financial reports.” Examples include a salesperson who prematurely reports sales to boost commissions or a controller who books fictitious revenue to hide theft — or lackluster financial performance.

These types of schemes can be costly. The ACFE’s survey found that the median loss from misstated financial results is roughly $593,000.

Element of surprise

Routine financial statement audits don’t provide an absolute guarantee against financial misstatement and other fraud schemes. In fact, external audits were the primary detection method in just 4% of the cases reported in the ACFE study. Although a financial statement audit serves as a vital role in corporate governance, the ACFE advises that it shouldn’t be relied upon as an organization’s primary antifraud mechanism.

By comparison, a surprise audit more closely examines the company’s internal controls that are intended to prevent and detect fraud. Here, auditors aim to identify any weaknesses that could make assets vulnerable and to determine whether anyone has already exploited those weaknesses to misappropriate assets. Auditors show up unexpectedly — usually when the owners suspect foul play, or randomly as part of the company’s antifraud policies — to review cash accounts, bank statements, expense reports, payroll, purchasing, sales and other areas for suspicious activity.

The element of surprise is critical. Announcing an upcoming audit gives wrongdoers time to cover their tracks by shredding (or creating false) documents, altering records or financial statements, or hiding evidence.

Perpetrators are likely to have paid close attention to how previous financial statement audits were performed — including the order in which the auditor proceeded. But, in a surprise audit, the auditor might follow a different process or schedule. For example, instead of beginning audit procedures with cash, the auditor might first scrutinize receivables or vendor invoices. Surprise audits focus particularly on high-risk areas such as inventory, receivables and sales. In the course of performing them, auditors typically use technology to conduct sampling and data analysis.

Big benefits

In the ACFE survey, the median loss for organizations that conducted surprise audits was $75,000, compared with a median loss of $150,000 for those organizations that didn’t perform this measure — a 50% difference. This discrepancy is no surprise in light of how much longer fraud schemes went undetected in organizations that failed to conduct surprise audits. The median duration in those organizations was 18 months, compared with only nine months for organizations that performed surprise audits.

Such audits can have a strong deterrent effect as well. While surprise audits, by definition, aren’t announced ahead of time, companies should state in their fraud policies that random tests will be conducted to ensure internal controls aren’t being circumvented. If this isn’t enough to deter would-be thieves or convince current perpetrators to abandon their schemes, simply seeing guilty co-workers get swept up in a surprise audit should do the trick.

Additional investigation

As with financial statement audits, an auditor’s finding of suspicious activity in a surprise audit will likely require additional forensic investigation. Depending on the type of scheme, an auditor might conduct interviews with suspects and possible witnesses, scour financial statements and records, and perform in-depth data analysis to get to the bottom of the matter. Contact us to schedule a surprise audit for your organization.

© 2022

What do you do with your financial statements when your auditor delivers them? Resist the temptation to just file them away — they’re more than an exercise in compliance. With a little finagling, you can calculate key financial ratios from line items in your company’s financial statements. These metrics provide insight into historical trends, potential areas for improvement and how the business is likely to perform in the future.

Financial ratios are generally grouped into the following four principal categories:

1. Operating

Operating ratios — such as the gross margin or earnings per share — evaluate management’s performance and the effects of economic and industry forces. Operating ratios can illustrate how efficiently a company is controlling costs, generating sales and profits, and converting revenue to cash.

This analysis shouldn’t stop at the top and bottom of the income statement. Often, it’s useful to look at individual line items, such as returns, rent, payroll, owners’ compensation, interest and depreciation expense.

2. Asset management

Asset management ratios gauge liquidity, which refers to the ability of a company to meet current obligations. Commonly used liquidity ratios include:

• Current ratio, or the ratio of current assets to current liabilities,
• Quick ratio, which only considers assets that can be readily liquidated, such as cash and accounts receivable,
• Days in receivables outstanding, which estimates the average collection period for credit sales, and
• Days in inventory, which estimates the average time it takes to sell a unit of inventory.

It’s also important to consider long-term assets, such as equipment, with the total asset turnover. This ratio tells how many dollars in revenue a company generates from each dollar invested in assets. Management must walk a fine line with 1) efficient asset management, which aims to minimize the amount of working capital and other assets on hand, and 2) satisfying customers and suppliers, which calls for flexible credit terms, ample safety stock and quick bill payment.

3. Coverage

Coverage ratios measure a company’s capacity to service its debt. One commonly used coverage ratio is times interest earned, which measures a firm’s ability to meet interest payments and indicates its capacity to take on additional debt. Another is current debt coverage, which can be used to measure a company’s ability to repay its current debt.

Before a company that already has significant bank debt seeks further financing, it should calculate its coverage ratios. Then it should consider what message management sends to potential lenders.

4. Leverage

Leverage ratios can indicate a company’s long-term solvency. The long-term debt-to-equity ratio represents how much debt is funding company assets.

For example, a long-term debt-to-equity ratio of five-to-one indicates that the company requires significant debt financing to run operations. This may translate into lower returns for shareholders and higher default risk for creditors. And, because the company needs to make considerable interest payments, it has less cash to meet its current obligations.

Basis of comparison 

Ratios mean little without appropriate benchmarks. Comparing a company to its competitors, industry averages and its own historical performance provides perspective on its current financial health. Contact us to help select relevant ratios to include in your analysis. We can help you create a scorecard from your year-end financial statements that your in-house accounting team can recreate throughout the year using preliminary financial numbers.

© 2022

Securities and Exchange Commission (SEC) Chair Gary Gensler spoke during a recent webcast to commemorate the 20-year anniversary of the Sarbanes-Oxley Act. Gensler recommended that the SEC take a “fresh look” at its rules on the issue of auditor conflicts of interest. He also asked the Public Company Accounting Oversight Board (PCAOB) to add auditor independence standards to its 2023 agenda.

Here’s why independence matters for public and private entities alike and what you can do to identify and minimize potential conflicts of interest.

SEC oversight

Enacted in the aftermath of the Enron and WorldCom accounting scandals, the Sarbanes-Oxley Act directed the SEC to create barriers between auditors and other parts of their firms. This caused many firms to spin off their consulting businesses into separate entities. “Over the past 20 years, however, many of these firms went on to rebuild them again. PCAOB inspections continue to identify independence — and lack of professional skepticism — as perennial problem areas,” said Gensler.

Under Rule 2-01 of Regulation S-X, when investigating auditor independence, the SEC considers whether an engagement:

• Creates a mutual or conflicting interest,
• Puts the auditor in a position of auditing his or her own work,
• Results in the auditor acting as a member of management or an employee of its audit client, or
• Puts the auditor in a position of being the client’s advocate.

The SEC’s guidance applies to audit firms, covered people in those firms and their immediate family members. The concept of “covered people” extends beyond audit team members. It may include individuals in the firm’s chain of command who might affect the audit process, as well as other current and former partners and managers.

For example, an audit firm might not be independent if, at any time during the audit engagement, a former partner or professional employee is in an accounting or financial reporting oversight role at an audit client. Such an arrangement may be particularly problematic if the former partner has a buyout arrangement that’s contingent on the firm’s operating results.

AICPA guidance

Conflicts of interest are an area of concern for all organizations, not just public companies. According to the American Institute of Certified Public Accountants (AICPA), “A conflict of interest may occur if a member performs a professional service for a client and the member or his or her firm has a relationship with another person, entity, product or service that could, in the member’s professional judgment, be viewed by the client or other appropriate parties as impairing the member’s objectivity.” Management should be on the lookout for potential conflicts when:

• Hiring an external auditor,
• Upgrading the level of assurance from a compilation or review to an audit, and
• Using the audit firm for a nonaudit purposes, such as investment advisory services and human resource consulting

Determining whether a conflict of interest exists requires an analysis of facts. Some conflicts may be obvious, while others may require in-depth scrutiny.

For example, suppose a company asks its audit firm to provide financial consulting services in a legal dispute with another company that’s also an existing audit client. Here, given the inside knowledge the audit firm possesses of the company it audits, a conflict of interest likely exists. The audit firm can’t serve both parties to the lawsuit and comply with the AICPA’s ethical and professional standards.

Diligence is critical 

Before the start of audit season, it’s important to re-evaluate whether there’s been any change in circumstances this year between your organization and your audit firm that could create potential conflicts of interest. Examples include staffing changes, M&A activity and new service offerings. This is a matter our firm takes seriously and proactively safeguards against. If you suspect that a conflict exists, contact us to discuss the matter and determine the most appropriate way to handle it.

© 2022