Check out our latest “Timely Takes” Podcast featuring Orrick’s J.T. Ho & his monthly update on securities & governance developments. In this installment, J.T. reviews:
– Climate disclosure rules developments
– New DEI case law from the 4th Circuit
– AI developments on the disclosure & enforcement front
– Cybersecurity guidance and Corp Fin staff comments
-ISS & Glass Lewis developments
As always, if you have insights on a securities law, capital markets or corporate governance issue, trend or development that you’d like to share in a podcast, we’d love to hear from you. You can email me and/or Meredith at john@thecorporatecounsel.net or mervine@ccrcorp.com.
On Friday, the SEC’s Division of Enforcement announced enforcement proceedings against the BF Borgers CPA PC accounting firm and its sole partner, Benjamin Borgers, for alleged “deliberate and systemic failures” to comply with PCAOB standards in audits and reviews incorporated in more than 1,500 SEC filings from January 2021 through June 2023. As this excerpt from the SEC’s press release illustrates, the allegations are jaw-dropping:
The SEC’s order finds that, among other things, the Respondents failed to adequately supervise and review the work of the team performing the audits and reviews; did not properly prepare and maintain audit documentation, known as “workpapers;” and failed to obtain engagement quality reviews, without which an audit firm may not issue an audit report. According to the SEC’s order, of 369 BF Borgers clients whose public filings from January 2021 through June 2023 incorporated BF Borgers’s audits and reviews, at least 75 percent of the filings incorporated BF Borgers’s audits and reviews that did not comply with PCAOB standards.
The SEC’s order further finds that, at Benjamin Borgers’s direction, BF Borgers staff copied workpapers from previous engagements for their clients, changing only the relevant dates, and then passed them off as workpapers for the current audit period. As a result, the order finds, BF Borgers’s workpapers falsely documented work that had not been performed. Among other things, the workpapers regularly documented purported planning meetings – required to discuss a client’s business and consider any potential risk areas – that never occurred and falsely represented that both Benjamin Borgers, as the partner in charge of the engagement, and an engagement quality reviewer had reviewed and approved the work.
The SEC’s order in this case reads like a litany of every SEC rule & statutory provision that an auditor could conceivably violate (or cause its client to violate) in connection with an audit or review engagement. The case was settled on a neither admit nor deny basis, but not surprisingly, the SEC absolutely clobbered both respondents in terms of the sanctions it imposed. In addition to hefty monetary penalties, the SEC essentially put an end to both respondents’ public company practice by issuing an order under Rule 102(e) denying them the privilege of appearing or practicing before the SEC as an accountant.
BF Borgers may not have been well known to many of our readers before last Friday, but the firm has been a fairly significant player, particularly among small cap issuers. The firm ranked 8th in overall market share for public company audits last year & ranked 6th in market share for non-SPAC initial public offerings. It also was the auditor for a particularly high-profile public company, Trump Media, and . . . umm. . . [This marks the point where I stopped writing and bit my tongue so hard I had to go to the ER for stitches.]
It’s hard to overstate the mess that the BF Borgers scandal creates for its public company clients. In an effort to provide some guidance to those clients, Corp Fin’s Office of the Chief Accountant issued a statement highlighting their disclosure and reporting obligations. In addition to flagging the Item 4.01 8-K report required in connection with a change in accountants, the statement highlights the impact on companies with respect to their future SEC filings:
– Form 10-K filings on or after the date of the Order may not include audit reports from BF Borgers. Each fiscal year presented must be audited by a qualified, independent, PCAOB-registered public accountant that is permitted to appear or practice before the Commission.
– Form 10-Q filings on or after the date of the Order may not present financial information that has been reviewed by BF Borgers. Each quarterly period presented must be reviewed by a qualified, independent, PCAOB-registered public accountant that is permitted to appear or practice before the Commission.
– Form 20-F filings on or after the date of the Order may not include audit reports from BF Borgers. Each fiscal year presented must be audited by a qualified, independent, PCAOB-registered public accountant that is permitted to appear or practice before the Commission.
That means that companies are going to need to re-audit all of the years covered by a BF Borgers audit report for their next 10-K and re-do prior interim reviews for periods presented in upcoming 10-Qs. Unfortunately, for some of those companies, that may be the least of their problems.
For instance, the timing of the SEC’s action means that former Borgers clients face a looming 10-Q deadline, and even with a Rule 12b-25 extension, it may be practically impossible to retain a new accountant and complete the required review by the extended 10-Q deadline. Under the circumstances, I expect that any new accounting firm will need to do a lot of additional work before it will issue a review report and that audit committees will want to have those numbers scrubbed very hard before signing off on a 10-Q filing containing them. The bottom line is that many of these companies are going to be late filers.
What’s more, given all the work that Borgers apparently didn’t do on hundreds of audits, once new auditors start poking around, my guess is we’re likely to see a fair share of these companies conclude that restatements of prior audits are necessary – which will open up a “whole ‘nother bag of snakes.”
By now, BF Borgers’ audit clients and their lawyers may feel like their heads are spinning, and with good reason. This is a mess, and there are going to be a lot of challenging issues for those companies and their advisors to address during the coming weeks. My guess is that the Staff will have more to say at some point about this situation, but in the meantime, we have resources that can help. These include:
Last month, the PCAOB released this spotlight, Inspection Observations Related to Auditor Use of Data and Reports. The report focuses on auditors’ use of information produced by the company (“IPC”), such as invoices and shipping documents, and information from external sources, such as customer purchase orders and bank records, which must be both “sufficient” in quantity and “appropriate” (i.e., relevant and reliable).
In issuing the report, the PCAOB hopes to “help auditors understand how the testing of IPC and information from external sources is properly performed” by describing recent staff observations on this issue. 17% of identified deficiencies in the 2021 and 2022 inspection cycles related to insufficient testing procedures over the accuracy & completeness of IPC or other data or the controls over that data.
What does this mean for companies? Internal audit teams should take note! This Radical Compliance blog says this “advice” from the PCAOB “has a habit of soon becoming new demands placed upon you by your auditor.” That could mean more control testing by audit firms — and higher fees — and more required of internal accounting folks and internal audit. The blog has tips for anticipating auditor concerns, moving towards more robust systems and documenting controls.
Last spring, I blogged that the requirement for auditors to identify “critical audit matters” (CAMs) has not been living up to the PCAOB’s hopes & dreams. As part of its continuing effort to ensure that audit opinions communicate decision-useful information to investors (something that’s surprisingly been questioned as of late), the PCAOB’s Investor Advisory Group has recently announced that it’s soliciting public input from investors, analysts, issuers and auditors on the most “decision-useful” CAMs from public company audit reports in 2023 10-Ks and 20-Fs. The IAG asks that all “nominations” be submitted by June 30 and accompanied by an up to 300-word explanation.
The IAG will select its top 3 and report out publicly later this year. It’ll be interesting to see how these stack up to the most common CAMs!
The transcript for our recent “Conduct of the Annual Meeting” webcast featuring J.M. Smucker’s Peter Farah, Broadridge’s William Kennedy, Intuit’s Erick Rivero, and Carl Hagberg of The Shareholder Service Optimizer is now available. During the program, our panelists shared some really practical tips to make your solicitation and annual meeting run smoothly. Here are just a few:
– Ask Broadridge (and other service providers) each year about their technology improvements for virtual meeting platforms — the capabilities have exponentially expanded in a few short years. Not only that, but they still want to hear what other features you’d like to see next year.
– Most technology issues are user error on the company side. Have an audio-visual and IT professional in the room with you or at the ready and consider dress rehearsals. Make sure you mimic the conditions of your annual meeting (e.g., have key participants in the same location).
– Consider reserving a back-up meeting room, even for internal participants in a virtual meeting.
– “Close the marketing gap” by making it easier for shareholders (particularly retail) to vote. Consider adding a QR code to your proxy statement that takes people directly to the voting platform.
– Disclose how you plan to handle Q&A upfront, in your proxy statement. And, if you have an in-person or virtual meeting, physically hand the rules of conduct to each in-person attendee and ask that they read, understand and observe them.
– If the CEO chairs the meeting, also have an independent director ready and available for Q&A to handle questions that aren’t appropriately addressed by the CEO (e.g., on CEO compensation).
– Consider saying in your proxy or rules of conduct that you may answer appropriate questions on your website to the extent you didn’t address during the meeting. This is appreciated by shareholders and useful if you have technical issues.
– In-person meeting security needs to be for everybody — not just management and the board.
If you are not a member of TheCorporateCounsel.net, email sales@ccrcorp.com to sign up today and get access to the full transcript – or sign up online.
This Cooley PubCo blog discusses the latest development in the now five-year-long saga involving the SEC’s proxy advisor rulemaking. In February, Liz shared that a federal district court had ruled in favor of ISS in its lawsuit challenging the SEC’s 2020 rule that would have subjected proxy advisors to enhanced regulations by saying they engage in the “solicitation” of proxies. She noted that the National Association of Manufacturers was considering an appeal.
The Cooley blog says that both NAM and the SEC have now filed notices of appeal. “NAM first on April 16, with the SEC following a week later on April 23. Subsequently, the clerk of the DC Circuit filed an order consolidating the two appeals and setting out a schedule for various submissions by the parties.”
The blog highlights that the SEC and NAM are head-to-head in another lawsuit involving the same rulemaking.
As noted above, in this case brought by ISS, NAM favored the 2020 amendments, which led it to intervene on the side of the SEC (and also to its becoming a defendant). It may be a little head-spinning, but NAM also has a separate case challenging the proxy advisor rules against the SEC before the Fifth Circuit. In July 2022, NAM filed a complaint against the SEC, asking that the 2022 amendments to the proxy advisor rules—which, as noted above, reversed some of the key provisions in the 2020 rules, including the company-favorable condition that would have required company engagement—be set aside under the APA and declared unlawful and void. In September, NAM filed a motion for summary judgment, characterizing the case as “a study in capricious agency action.”
In December 2022, the Federal District Court for the Western District of Texas issued an Order granting summary judgment to the SEC and Gensler and denying summary judgment to NAM in that litigation. (See this PubCo post.) NAM appealed, and in August 2023, a three-judge panel of the Fifth Circuit heard oral argument on NAM’s appeal.
Since that case is ongoing and a decision has yet to be issued, the blog notes that the two opposing parties, SEC and NAM, in a brief moment of concurrence roundtable, jointly advised the Court of their appeals in the ISS litigation.
This time last year, Time Magazine ran the enticing article “The AI Job That Pays Up to $335K—and You Don’t Need a Computer Engineering Background.” The job, of course, was “prompt engineer,” and the article suggested a humanities background might be best for this role. While it was focused on prompt engineering as an AI training tool, prompt engineering is also key to employing generative AI in its various practical applications — since fine-tuning inputs is key to better generative AI outputs.
I must admit that I remain wary of legal applications of generative AI, but this Loeb & Loeb Quick Take on generative AI was a welcome reminder that there’s a fast-moving (now more AI-run) world out there that keeps advancing whether I’m ready or not! And I better get with the times since the post argues that using gen AI tools “is becoming an essential skill” for lawyers to streamline workflows, improve efficiency and “meet the evolving demands of clients.” Enter the need to “become proficient in ‘engineering’ your prompts.”
The post gives six tips to help lawyers improve their “prompt engineering” skills without formal training. Here are a few:
Be Precise: Accuracy and precision are critical when it comes to the law. Avoid ambiguity in your prompts by using clear, concise, and plain language. Aim for a conversational tone, avoid legalese, and explain to the tool the meaning of any acronyms and other abbreviations used in the prompt.
Specify the Why and the What: Clearly state your goal. What information are you seeking? What action do you want the AI tool to take? Once the intent is established, provide specific instructions on the desired output. For example, specify the “voice” you are looking for (e.g., formal, casual, personal, adversarial), and indicate the format you want for the output (e.g., a summary, an analysis, a draft, a bullet-point list, a table, a deck slide, an email correspondence, a blog-post, etc.).
Iterate and Refine: Leverage the chat-based nature of GenAI tools. You can have a back-and-forth conversation with the tool, providing additional context and tweaking prompts on an iterative basis. Try starting with a basic question, then keep refining the prompt (such as by adding more context and specificity, identifying problems with the output from an earlier prompt, and/or changing the tone or terminology) as needed to steer the AI tool towards a more relevant and focused output.
Despite my AI reluctance (is that an official term yet?), I do recognize the value in developing these skills. So I’ve started leveraging ChatGPT for some low-risk personal applications — things like creating vacation itineraries, meal plans & grocery lists — and have found employing these tips to be crucial to getting useful outputs even for these basic, personal tasks. When I went to check out the “family-friendly restaurants” it recommended for one vacation, I discovered a number of them had closed during the pandemic, which also gave me personal experience & understanding of some of the risks of using generative AI and why it’s so important to do your own work.
Ideagen Audit Analytics recently released its annual market share analysis of public company auditors as of early 2024. Here are some takeaways from the summary:
– 239 audit firms conducted audits for 6,607 registrants
– The top ten firms audited 68% of registrants
– Among large accelerated filers, the Big Four audited 90% of registrants
– Audit firm market share was diverse among SRCs, with several firms outside of the Big Four holding a top spot
– The Big Four generally topped the lists and, excluding SPACs, the fourth Big Four player had a 5% market share lead on the audit firm ranked fifth
