March 8, 2022

Internal Audit: Corporate Anti-Fraud Tactics Need Updating?

Over on “Radical Compliance”, Matt Kelly blogged about a recent Association of Fraud Examiners benchmarking report on the technologies companies use to fight fraud. The blog says that corporate approaches to detecting and preventing fraud could use some updating:

The most telling line in the report comes right at the start: “Our study indicates that the most commonly used analytics are the tried-and-true techniques that organizations have found success with for decades,” such as exception reporting and anomaly detection, as well as automated monitoring of red flags and business rules. More than half of respondents said they use such techniques.

Along similar lines, the two risk areas most commonly monitored with analytics were fraudulent disbursements and outgoing payments (cited by 43 percent of respondents) and procurement and purchasing fraud (41 percent of respondents). That’s great, but outgoing payments and procurement are financial functions that every business in the universe has, and two primary vectors for fraud. So it’s only natural that they’re also the functions most likely to get the anti-fraud analytics treatment.

On the other hand, if we want an example of companies not yet embracing the full potential of anti-fraud analytics, the ACFE also had an interesting stat about what sources of data companies use for their analytics efforts. Eighty percent of respondents said they use structured data, such as invoice amounts listed in databases or dates included on purchase numbers. Only 33 percent, however, used unstructured data — random information that might exist in emails, PowerPoint presentations, or other sources, and that doesn’t neatly export into an Excel table.

Unstructured information is where the good stuff is, especially for frauds that involve multiple employees who might be talking with each other about their scams. That said, unstructured information is also more difficult to process. “This highlights that most organizations still rely heavily on traditional analytics approaches and data sources to drive their anti-fraud programs,” the ACFE says. Indeed.

The blog explores other areas covered by the report, including the surprising number of companies that don’t use case management software and the increasing importance of technology in fraud assessments in the Covid-19 era.

John Jenkins

March 8, 2022

Malpractice Insurance: Do In-House Lawyers Need It?

Law firm lawyers wouldn’t dream of practicing law without having a malpractice policy in place, but those policies are far from ubiquitous among in-house lawyers.  This Woodruff Sawyer blog takes a look at whether in-house lawyers should consider malpractice insurance.  The blog says that the good news is that if you’re worried about your employer suing you, that’s unlikely. (Of course, getting fired is a whole other kettle of fish).  However, this excerpt says that there still may be some situations in which “employed lawyers insurance” may make sense:

So, when is employed lawyers insurance useful? Here are a few scenarios:

Someone Other Than the Employer Perceives an Attorney-Client Relationship with You. Say, for example, during your day-to-day dealings with other employees, someone casually asks a question about whether he should exercise his options, or about a speeding ticket or an apartment eviction. If this person now perceives that you are his lawyer because of that exchange, it’s possible that he could sue you for malpractice.

Employed lawyers insurance gives an extra layer of protection here, but it’s certainly better to avoid casually giving advice to folks who are not your clients. Your best practice is to be deliberate about refraining from giving legal advice to those with whom you do not want to have an attorney-client relationship.

If you’re in a work environment where, as a cultural matter, you feel obligated to answer these types of questions, employed lawyers insurance is something you might consider. The same is true if part of your job is to give advice to third parties that are not technically the same as your employer, for example the charitable trust “arm” of your employer.

You Are Moonlighting. Employers sometimes encourage their employees to moonlight on a pro bono basis. Employed lawyers insurance responds if you are sued for malpractice as a result of these activities. The insurance will also typically provide your defense costs should you find yourself the subject of a hearing in front of the California Bar.

You Are Concerned That Your Employer Won’t Indemnify You. You may work for an employer whom you perceive will not defend you if a third party (a vendor or customer, for example) decides to sue you for legal malpractice for whatever reason, or you are worried that your company might be insolvent (and thus can’t indemnify you) at the time of the suit.

The blog reviews how these policies work and their typical exclusions, and also addresses alternatives, including personal indemnification agreements and, in some cases, D&O insurance.

John Jenkins

March 7, 2022

Securities Lawyers’ Survey: Who Holds the Pen?

This recent article by Bloomberg Law’s Preston Brewer analyzes the results of a survey of in-house & outside securities and capital markets lawyers concerning allocation of drafting responsibilities.  The survey suggests that in-house and outside counsel are usually on the same page when it comes to who should take the lead role in drafting documents, but this excerpt says that there are also some interesting areas of divergence:

Law firm attorneys overwhelmingly see due diligence request lists (68%) and term sheets (68%) as duties within their purview, while 62% of in-house respondents said they would keep due diligence lists in-house—and a full 75% of them view preparation of term sheets as a task for in-house counsel.

Less dramatically, substantially more outside counsel said they would assign themselves securities offering documents (a margin of 15 percentage points for SEC Form S-1 registration statements and private placement memoranda). For closing checklists, an astounding 100% of law firm attorney respondents would give the work to themselves versus 82% of in-house counsel choosing to assign that work to outside attorneys.

I don’t know about you folks, but speaking for myself, if an in-house colleague offered to take drafting responsibility for due diligence requests & term sheets for deals that we were working on, they would immediately move into the LARGE holiday gift basket category.

The survey found that 41% of respondents said they expect more work to go to outside counsel over the next five years, while 20% expected more work to go to inside counsel & 39% expected the mix to remain the same. That number surprises me, given the high & ever-increasing level of expertise among corporate law departments – although it may be a bit skewed by the fact that 28 of the 47 survey respondents were law firm lawyers.

The survey has a bunch of other interesting material in it involving both private and public companies, and one of the biggest takeaways is that both outside and in-house securities lawyers are pretty optimistic about the future of their practice. Attorneys feel strongly that corporate practice and securities law is a growth industry for both law firms and in-house counsel. The survey says that 70% expect increased activity in private company work, and more than half expect growth in private equity and public company representations.

John Jenkins

March 7, 2022

Staggered Boards: They’re Good Again?

Okay, a few years ago, I blogged about research suggesting that the much-maligned staggered board was actually good for shareholders.  That renaissance lasted about two days, at which point it became painfully obvious that investors were having none of it.  Now, I’m again peeking out of my shell to highlight another study that says staggered boards may be beneficial.  Here’s the abstract:

Staggered boards (SBs) are one of the most potent common entrenchment devices, and their value effects are considerably debated. We study SBs’ effects on firm value, managerial behavior, and investor composition using a quasi-experimental setting: a 1990 law that imposed an SB on all Massachusetts-incorporated firms. The law led to an increase in Tobin’s Q, investment in CAPEX and R&D, patents, higher-quality patented innovations, and resulted in higher profitability. These effects are concentrated in innovating firms, especially those facing greater Wall Street scrutiny. An increase in institutional and dedicated investors also accompanied the imposition of SBs, facilitating a longer-term orientation. The evidence suggests SBs can benefit early-life-cycle firms facing high information asymmetries by allowing their managers to focus on long-term investments and innovations.

No, I’m not exactly sure what “Tobin’s Q” is either. You know who does know though? Cooley’s Cydney Posner, who has taken a deep dive into the study and its conclusions over on her blog. To me, the big takeaway from all of this is that while we’re all in favor of good corporate governance, the evidence continues to suggest that nobody really knows exactly what that is.

John Jenkins

March 7, 2022

Chart: Proxy Access v. Universal Proxy

The folks at Bass Berry recently held a webcast on the new universal proxy rules and have posted this blog summarizing the key takeaways from the program.  Among other things, the blog includes a chart that briefly comparing the differences between the typical proxy access bylaw and the universal proxy rules.  As you know, I can’t resist quick reference materials that I can quickly glance at and use to fake my way through a conference call, and this chart clearly makes the cut. Check it out!

John Jenkins

March 4, 2022

PracticalESG.com: Promo Event Ends in One Week!

We’re seeing a tremendously positive reception to our new membership site, PracticalESG.com. Thank you to everyone who’s signed up so far!

In the first couple of weeks of being live, we’ve continued to build out our organized content library with practical checklists and analysis – and we’ve held the following webcasts for members:

– “Shareholder Engagement: Fallout From the ‘ESG’ Tsunami

– “Supply Chains: Tracking ESG Issues

Don’t miss out! Only one week remains in our offer for 25% off the regular subscription pricing. You can sign up online – or email sales@ccrcorp.com today or call 1-800-737-1271 – to take advantage of this one-time promo event and get tools to make your ESG efforts easier & more successful.

Liz Dunshee

March 4, 2022

SEC Open Meeting: Cyber Disclosure on Agenda for Next Wednesday

Yesterday, the SEC gave notice of an open meeting next Wednesday, March 9th. There’s one item on the agenda:

The Commission will consider whether to propose amendments regarding cybersecurity risk management, strategy, governance, and incident disclosure.

This meeting isn’t too much of a surprise. It comes on the heels of last month’s cybersecurity proposal for registered investment advisers and investment companies – and at a time when cyber threat levels have reached new heights. Lawmakers have been urging SEC Chair Gary Gensler to follow through on his plan to propose rules. John blogged a couple months ago about what the new disclosure rules might include.

Liz Dunshee

March 4, 2022

Lawsuit Shows Importance of Social Media Controls

In a webcast last year – “Cyber, Data & Social: Getting in Front of Governance” – we talked about the importance of social media oversight & controls. The guidance is more on-point than ever now that shareholders have filed a class action complaint against a company for mistakenly tweeting just a portion of financial results (the good part, about a revenue jump).

The tweet – which was subsequently deleted – went out before the scheduled release time for the official earnings release, which provided a less rosy full picture (net loss and a miss of analyst estimates). Shareholders are therefore alleging that the tweet omitted material information and violated Section 10(b) and Rule 10b-5. Over on the “D&O Diary” blog Kevin LaCroix provides analysis:

This lawsuit has only just been filed and it remains to be seen how it will fare. Among other challenges the plaintiffs will face is demonstrating that the defendants acted with scienter – this pretty obviously was a goof-up of some kind, not some devious plan to hoodwink the market. Pretty clearly, something got short-circuited in the social media publication process. Arguably, the mistake was planning any type of social media release in advance of the release of the full results. But while these missteps may be deeply regrettable and even arguably negligent, it remains to be seen whether they will prove to be sufficient to establish securities fraud.

Among the many unusual features of this complaint is the unusually short class period. The putative class of investors on whose behalf the complaint was filed consists of investors who traded during a very short time period on the afternoon of February 10. I am sure there are readers out there who will point out similarly short class periods, but a class period this short is, in my experience, highly unusual if not unique. In addition to the short class period, the complaint itself –– which weighs in at nine pages in length – might be the shortest securities class action lawsuit complaint I have ever seen.

The one thing that is for sure is that the allegations in this complaint underscore the need for companies to build some protective processes around their social media practices, particularly when it comes to using social media to transmit news about the company’s operating and financial performance. As I noted above, the real error here may have been using social media to release partial financial results ahead of the full financial release. At a minimum, the allegations show that if the company is going to incorporate social media activities as part of its release of financial results, the social media activities should be carefully coordinated with the more traditional releases. Arguably, the use of social media should be as fully supervised as a full release would be.

Liz Dunshee

March 3, 2022

BlackRock’s 2022 Engagement Priorities: Director Accountability For Long-Term Value

In a sign that the height of shareholder engagement season is approaching, BlackRock Investment Stewardship has released its 2022 Engagement Priorities. The asset manager’s priorities are broadly the same as last year – which mapped to the UN Sustainable Development Goals – and signal a continued focus on board processes and accountability for long-term value creation.

The 10-page summary document identifies “Key Performance Indicators” for each of the main priorities. On top of the summary, BIS issued updated versions of its very detailed commentary on its engagement approach to:

1. Board Quality & Effectiveness – For companies with which BlackRock wishes to engage to understand the board’s role, it wants dialogue with a non-executive director. BlackRock assesses boards based on independence, tenure limits, time commitments, election cycles and diversity. BlackRock also wants companies to disclose their approach to ensuring meaningful board diversity and wants to see self-identified demographics on an aggregate basis, and understand how board composition aligns with the company’s strategy & business model.

2. Strategy, Purpose & Financial Resilience – BlackRock wants companies to set out how they’ve integrated business-relevant sustainability risks & opportunities. BIS encourages companies to disclose industry- or company-specific metrics to support their narrative on how they have considered key stakeholders’ interests in their business decision-making.

3. Incentives Aligned with Value Creation – BIS looks to companies to disclose incentives that are aligned with long-term value creation and sustained financial performance, underpinned by material and rigorous metrics that align with the company’s long-term strategic goals.

4. Climate Risk & Energy Transition – BlackRock encourages companies to discuss in their reporting how their business model is aligned to a scenario in which global warming is limited to well below 2°C, moving towards global net zero emissions by 2050. BIS encourages disclosures aligned with the four pillars of the TCFD—including scope 1 and 2 emissions, along with short-, medium-, and long-term science-based reduction targets, where available for the company’s sector. BlackRock won’t consider Scope 3 emissions disclosures & commitments “essential” for supporting directors.

5. Natural Capital – BlackRock wants info on how companies are managing material business risks & opportunities relating to natural resources such as air, water, land, minerals and forests.

6. Human Capital Management – BIS wants companies to provide info that shows how their approach to human capital management aligns with their stated strategy and business model, and to disclose actions they’re taking to support a diverse & engaged workforce.

7. Human Rights Impacts – BlackRock wants companies to discuss in their disclosures how the board oversees management’s approach to due diligence & remediation of adverse impacts to people arising from their business practices.

Each of these commentaries walks through BlackRock’s specific expectations and lists typical questions that they ask in engagement meetings. In total, the Investment Stewardship team published 53 pages of comprehensive guidance – on top of the 23-page voting guidelines and 20-page investment stewardship principles already issued. Hopefully that means that companies will be able to avoid any “gotchas” or surprises during engagements – and even more importantly, when it comes time to vote.

We’re posting this guidance in our “Shareholder Engagement” Practice Area along with other useful commentaries – so members can visit that library of info along with our collection of investor voting policies throughout proxy season.

Liz Dunshee

March 3, 2022

Human Capital: What a Prescriptive Disclosure Rule Could Look Like

According to its updated “human capital management” commentary, BlackRock continues to believe that companies that have strong relationships with their workforce are more likely to deliver long-term shareholder value. Particularly in this labor market, robust HCM can be a competitive advantage – so companies need to explain how they set themselves apart. The commentary outlines several workforce-related topics that BIS is expecting to understand through disclosures & engagements – which may be mapped to the SASB materiality framework or other standards.

BlackRock isn’t alone. According to this WSJ article, other asset managers, as well as pension funds, are also continuing to clamor for more “human capital” info. In response to this investor appetite for specific data, the SEC is aspiring to propose amendments to the human capital disclosure requirements in Item 101 of Regulation S-K. Here’s a reminder of what a more prescriptive rule could include:

Commission staff have been working on a rule that would mandate additional disclosures around human capital since SEC Chairman Gary Gensler took office last April. The new requirements would likely be mandatory for public companies and could touch on turnover, skills and development training, compensation, benefits, workforce demographics including diversity, and health and safety, he has said.

According to investors quoted in the article, most disclosure being provided in response to the principles-based 2020 rule isn’t getting them the info they want. In particular, the events of the past few years have heightened investor interest in turnover, health & safety, pay equity, and broader DEI progress – but only a small minority of companies publish specific metrics for those topics. Check out the memos in our “Human Capital Management” Practice Area for more analysis of disclosure trends under the current rule.

Liz Dunshee