Module 6 Flashcards

(34 cards)

1
Q

Duty of Care

A
  • Fiduciaries for corporation & stockholders (owners with limited access to information)
  • Good faith & prudent
  • Potentially liable to stockholders for negligence – usually related to fraud; rarely for poor decisions-making, except when unethical

Corporate directors and officers are expected to exercise an appropriate level of care and loyalty to the corporation and its shareholders. Not doing so can result in lawsuits from shareholders.

The duty of care means that you act as a fiduciary agent for shareholders and you make or approve decisions that are with good faith and prudent under the circumstances. Acting prudent is generally define as what a reasonable person would do.

Some of the largest lawsuits stem from participation in, or negligent in not detecting or preventing financial statement fraud. Lawsuits can also result from negligence in making decisions regarding mergers and acquisitions – generally when the financial data for the other corporation was materially misstated and the misstatements were not detected until after a merger or acquisition.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Duty of Loyalty

A
  • Faithfulness to one’s obligations and duties
  • Subordinate personal interests to welfare of the corporation
  • Refrain from self-serving decisions

Corporate directors and officers are also expected to be loyal to the interests of the corporation, even if some decisions that benefit the corporation, but not you as an individual. Loyalty can be more difficult for officers because their compensation is more likely impacted by their decisions.

A good example of misplace loyalty was Andy Fastow, the Enron CFO made a number of decisions affecting special purpose entities that did fraudulently help Enron temporarily, but the decisions affected his personal wealth even more. He had personal interest in virtually all of the special purpose entities Enron established. Apparently, some or all members of Enron’s board of directors knew that Fastow had some financial interest in these special purpose entities when they approved them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Liability of Directors and Officers

Generally Liable for:

Not Generally Liable for:

A

Generally Liable for:

  • Crimes and torts committed by themselves or by employees under their supervision.
  • When they obviously failed in carrying out their duties.

Not Generally Liable for:

  • Business Judgments Rule
  • Poor business judgments or decisions
  • Acting within powers of the corporation
  • Reasonable basis for decisions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Clawback of Incentive Compensation

A
  • Public companies need to “clawback” incentive-based compensation paid to senior executives for 3 years prior to when financial restatement occurs under SOX and Dodd-Frank acts.
  • Each Act has somewhat different requirements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Legal Liability for External Auditors

A

Auditors can be sued by clients, investors, creditors, and the government.

Auditors can be held liable under two classes of law

  1. Common law
  2. Statutory law
  • Legislation passed at state or federal level that establishes certain courses of conduct that must be adhered to by parties.
  • Primarily securities laws
  • Other federal laws to prohibit or discourage unethical actions

External auditors are generally sued for negligence in performing their services, where the client or others using the auditor’s work product, are harmed. Government can take action under various securities laws or where the government becomes a successor to the client as in the case of failed federally insured financial institutions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Primary Plaintiffs for External Accountants & Auditors

A

Clients

  • Breach of contract or negligence

3rd Party beneficiaries (users of F.S.)

  • Negligence

Government & Taxpayers

  • Violate security laws because of negligence or for government insured financial institutions

These 3 sources account for virtually all CPA lawsuits related to job performance. Sometimes the government sues as a client when it takes over a failed, federally insured financial institution. The Savings & Law scandal in the 1980s and smaller numbers of bank failure after the 2008 financial crisis are perfect examples.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Negligence?

A

Ordinary Negligence

Violation of a legal duty to exercise a degree of care that an ordinarily prudent person (CPA) would exercise under similar circumstances.

Gross Negligence

Reckless disregard for professional responsibilities.

How to Determine:

  • Reference to Professional standards (GAAS)
  • CPA as an Expert Witness

From a legal perspective, negligence is generally classified as ordinary or gross and the distinction between the two make a significant difference in the external auditor’s legal liability, especially under U.S. security laws.

Gross Negligence usually results from:

  • Multiple & significant noncompliance with standards and rules for the service performed.
  • Ignoring multiple red flags of problems with information provided by the client.
  • Not being professionally skeptical in evaluating information provided by the client.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Most Likely Client Lawsuits

A

Loss could include fines, penalties, interest, higher interest rate on a loan, lost assets for undetected theft of asset fraud. etc. Common Law is not based on laws based by legislators, but is based on precedent-setting prior cases or the Uniform Commercial Code and the allegation that the CPA was negligent in carrying our the service they provided to the client.

Such cases are usually small dollars and covered by COA malpractice insurance, unless there was “gross” negligence. Even for undetected fraudulent financial reporting, losses are usually smaller to clients and client management is usually participating in the fraud if it is very significant.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Clients Must Generally Prove

A
  1. CPA accepted duty to exercise due professional care. (Level of care should be included in the engagement letter - based on level of service.)
  2. Breach of duty (through negligence)
  3. Client suffered a loss
  4. Loss resulted from CPA’s negligence or can be linked to the CPA’s negligence of either not detecting errors or fraud in the information provided by the client or in errors made by the CPA.

Level of service relates to the level of assurance the CPA offered, which for financial statement audits and other attestation engagements where reliability is offered to 3rd parties the auditing & attestation standards describe the level of service for audit/examinations, reviews, agreed upon procedures and compilations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

3rd Parties Must Generally Prove Under Common Law

A
  1. They sustained a loss.
  2. Auditor was negligent.
  3. 3rd party relied on the financial statements.
  4. Financial statements were either misleading or had misstatement, which is the proximate cause for the loss.
  5. Privity exists (as defined by state precedent or law)

3rd party plaintiffs must generally prove all 5 of these items to be successful in a lawsuit against a CPA for negligence when the case is brought directly by the 3rd party. As we will see later, the required proof is less under one of the U.S. security laws when the suit is filed by the federal government.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Basis for 3rd Party Lawsuits

A
  • Basically an inferred-breach of contract.
  • 3rd party must be in privity (contractual relationship) with the CPA.
  • Privity is defined by precedent setting cases and varies by state.
  • Generally, there are 3-levels of defining privity in terms of the universe of potential 3rd parties who can sue CPAs.
  • Some states enacted laws to define when privity exists.

3rd party lawsuits generally involve financial statement engagements. Except in rare cases when report use restrictions are clearly stated in the engagement letter, CPAs must assume that their report and the accompanying F.S. will be given to various 3rd parties to support their financial dealings with the client – whether it is for investing, divesting, loaning funds or granting credit.

Therefore, CPAs should know that people and organizations other than the client will be relying on their report and the related F.S.

Inferred contractual relationship, or privity, defines who, besides the client, is eligible to file a lawsuit against a CPA for negligence in providing services to another.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

3 Basic Approaches to Defining 3rd Party Privity Under Common Law

A
  1. Ultramares Approach
    1. CPAs liable to identified/known third parties
  2. Restatement of Torts Approach
    1. CPAs liable to foreseenclass(es) of third parties
  3. Rosenblum Approach
    1. CPAs liable to all foreseeable third parties

These 3 “approaches” really just define what category of 3rd parties can successfully sue a CPA for negligence. The 3 levels basically represent overlapping circles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Securities Exchange Act of 1933

A

Act applies to original purchasers of securities (stocks and bonds) from the issuer.

Secondary purchasers can also use this act for up to one year after the registration statement.

This Act has been modified multiple times since it was initially enacted in 1933. Because this Act primarily applies to individuals r organizations who buy the stock directly from the issuer based on the issuers registration statement, the burden of proof required is much less than what we have for lawsuits under common law. As a result, CPAs are at greater risk under this Act.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

3rd Party Liabilities Under Common Law

A

The scope of privity goes from limited to broad. Although not really addressed in the text, a few states have enacted laws to define 3rd party privity, taking it somewhat out of the court’s hands. This resulted from pressure from the CPA profession.

California used to use the most liberal, Rosenblum approach, until a California Supreme Court decision around 1995 after the court became more conservative. Approximate breakout: Ultramares - 30% (many by statute rather than common law) Restatement of Torts - 40% Rosenblum - 5% Unknown/undecided (few cases) - 25%.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Securities Exchange Act of 1934

A

Act applies to purchases of securities from secondary sources like stock exchanges.

Although purchasers of stock and bonds from secondary sources rely on published client financial statements that CPAs audited, that is not always the case and they may rely on more information for which the CPA had no duty to evaluate. Consequently, CPAs have a lower risk under the Act of 1934.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

CPA Liability Under Federal Securities Laws

A
  • Under the 1933 Act, CPAs could also possibly prove that the loss was not caused by F.S. misstatement or that the investor knew of the misstatement (hard to do unless the investor is an insider).
  • There’s more protection for, and less burden on, the investor under the 1933 Act probably because they are buying from the most common cause of misleading or misstated F.S. – a CPA’s client.
  • Generally under the 1934 Act, CPAs must be grossly negligent or a party to intentional misstatements to be prosecuted under this act. However, this act has “criminal” aspects.
  • What’s the difference between Civil & criminal? –Jail time is possible.
17
Q

Potential Criminal Liability

A
  • To be subject to criminal liability, auditors must generally be shown to be guilty of fraud, scienter or gross negligence.
  • Securities Act of 1933
    • Imprisonment up to 10 years, or
    • Fine up to $10,000, or both
  • Securities Act of 1934
    • Imprisonment up to 10 years, or
    • Fine up to $100,000 or both
18
Q

Sarbanes-Oxley (SOX) Act of 2002

A
  • SOX makes it a felony to destroy, alter or create documents to impede or obstruct a federal investigation.
  • SOX applies to management, accountants and auditors.
  • SOX has penalties for CEO & CFO for false certification of F.S.
  • SOX has civil & criminal provisions.
  • Criminal penalties:
    • Imprisonment of 20 years for obstruction of justice
    • Imprisonment of 25 years for securities fraud

We can thank Enron and Arthur Andersen for SOX and the first bullet is what Arthur Andersen was originally prosecuted for rather than negligence in performing audits of Enron’s financial statements. Eventually, after Arthur Andersen basically went out of business, the conviction was over-turned by a technicality by the U.S. supreme.

Many believe that the U.S. Department of Justice prosecuted Arthur Andersen for obstruction of justice because there were several other failed audits at large public companies at the time and they did not consider Arthur Andersen to be cooperating. Namely, Worldcom and Waste Management.

19
Q

Section 18 of the SEC Act of 1934

A
  • Imposes liability on any person who makes a material false or misleading statement in documents filed with the SEC.
  • Unlawful to make a false or misleading statement with respect to a material statement unless done in “good faith”.
  • Various court cases have shown both positive & negative outcomes for CPAs.
20
Q

Private Securities Litigation Reform Act

A

Private Securities Litigation Reform Act:

  • Amended securities acts to limit auditor liability to “proportionate” liability.
  • Requires auditor whistle blowing to SEC if client management does not take remedial action and report materially misstated financial statements

Proportionate liability can limit a CPA’s liability to a share of the plaintiff’s loss when the auditor’s negligence was not 100% of the reason for the misstated financial statement – generally true.

Because auditors are frequently the only parties left with financial resources after a company fails and fraud is detected, plaintiffs do not like proportionate liability.

21
Q

Racketeer Influenced & Corrupt Organizations Act (RICO)

A
  • Act covers as “racketeering activities” e.g., mail fraud and fraud in the sale of securities.
  • Act has civil and criminal sanctions for illegal acts.
  • Act provides for possible assessment of treble damages or 3 times the loss.
  • Rarely used for auditors as they must knowingly participate in the illegal act to be prosecuted under this act.

This Act was passed to fight organized crime and brings the concept of holding all parties to a conspiracy to commit a crime to similar liability.

It provides for extended criminal penalties and a civil cause cause of action for acts performed as part of an ongoing criminal organization. The RICO Act focuses specifically on racketeering, and it allows the leaders of a syndicate to be tried for the crimes which they ordered others to do or assist in, closing a perceived loophole that allowed someone who told a man to, for example, murder, to be exempt from the trial because he did not actually do it.

RICO was enacted by section 901(a) of the Organized Crime Act of 1970. In a 1993 case (Reves v. Ernst & Young), the court decided that CPAs cannot be held liable under RICO act unless they actually participated in the operation or management of the organization.

22
Q

Foreign Corrupt Practices Act of 1977

A
  • Prohibits payments (bribes) made by U. S. multinational entities, and SEC regulated foreign entities, to foreign government officials, including intermediaries to sell products or gain business.
  • Requires internal controls to prevent.
  • Violations can result in fines and enhanced controls.
  • Prohibited payment as one intended to influence a foreign official to act incompatible with his/her legal duty.
  • There are acceptable “facilitation” payments, but these would probably have to be to a governmental agency rather than an individual and for effort actually performed or expenses incurred.

This Act was passed after some very high profile payments by U.S. companies to sell their products or services to foreign governments. The excuse that it was standard practice to make such payments to foreign officials in these countries was deemed unacceptable. Acceptable facilitation or “grease” payments may include payments for: Permits, licenses, documents to qualify for work. Processing papers, such as visas. Providing police protection. Providing utilities. Travel expenses.

  • Applies to all firms, U.S. and foreign, filing with SEC.
  • Dept of Justice oversees criminal and civil enforcement.
  • SEC oversees civil enforcement with respect to registrants.
  • Corporation may be fined up to $1 million.
  • Officers may be fined up to $10,000; imprisoned up to 5 yrs or both. Corporation cannot indemnify officers.
23
Q

Overview

A

The Act imposes liability on any person or corporation who “knowingly presents, or causes to be presented, a false or fraudulent claim for payment” to the federal government. Any company that does business with the government—even indirectly (subcontractor) —may face FCA damages and penalties.

A lawsuit can be filed by U.S. government or by a “relator” in name of the U.S. and get 15 – 30% of any judgment or settlement. Although external auditors are rarely at risk under the FCA, internal accountants or auditors could be held liable if they had a role in the making or concealing the over charges to the government.

24
Q

False Claims Today

A
  • Most are now healthcare related:
    • Overcharges to Medicare
    • Marketing of Drugs for unapproved uses
  • Many relate to sale of goods or services at inflated prices or for substandard material or services.
  • Some relate to home mortgage & housing.
  • $4.9 billion in settlements & judgments in civil cases in FY 2012.

Healthcare and procurement related violations frequently involve accountants to craft or conceal the overcharges. In 1994, Litton paid over $80 million in over charges related to how it allocated computer center operating costs to divisions primarily selling products to the government. In 2012, Oracle paid almost $200 million for over charges from lower price discounts for software licenses and technical services than it had agreed to.

25
Medicare Fraud-Corporate Integrity Agreements
* OIG negotiates corporate integrity agreements (CIA) with health care providers and other entities as part of the settlement of Federal health care program investigations arising under a variety of civil false claims statutes. Providers or entities agree to the obligations, and in exchange, OIG agrees not to seek their exclusion from participation in Medicare, Medicaid, or other Federal health care programs. * CIAs have many common elements, but each one addresses the specific facts at issue and often attempts to accommodate and recognize many of the elements of preexisting voluntary compliance programs. The OIG is the Office of Inspector General for the U.S. Department of Health & Human Services. When they find Medicare fraud, they generally require improved internal controls and training., as well as formal agreements to implement these corrective actions.
26
CIA Requirements
A comprehensive CIA typically lasts 5 years and includes requirements to: * hire a compliance officer/appoint a compliance committee; * develop written standards and policies; * implement a comprehensive employee training program; * retain an independent review organization to conduct annual reviews; * establish a confidential disclosure program; * restrict employment of ineligible persons; * report overpayments, reportable events, and ongoing investigations/legal proceedings; and * provide an implementation report and annual reports to OIG on the status of the entity's compliance activities.
27
Independent Quality Monitor
When a False Claims Act settlement resolves allegations of fraud that impact the quality of patient care, OIG may enter into a "quality-of-care" Corporate Integrity Agreement (CIA) with the settling provider. Under this type of CIA, OIG requires that the provider retain an independent quality monitor. The quality monitor not only will address the specific issues underlying the allegations, but also will look at the entity's delivery of care and evaluate the provider's ability to prevent, detect, and respond to patient care problems.
28
Ethics for Governmental Audits
* From the Government Accountability Office (GAO) * Part of the Government Auditing Standards (Yellow Book) * Applies when audits are performed under these standards – generally local, state & federal government entities and those education, nonprofit or not-for profit entities receiving significant federal financial assistance under grants & contracts (single audit act audits). * Similar to the AICPA Code's rule on independence. Many CPAs have to follow these ethical standards when they do financial audits at these types of entities. The standards are really an extension of the AICPA Code. Auditors working for the government also have to follow these rules when they are auditing the federal government or when they are auditing recipients of federal funds.
29
Rules
30
GAS Independence Framework
31
Threats to Independence--the Standard
3.22 Auditors should determine whether identified threats to independence are at an acceptable level or have been eliminated or reduced to an acceptable level. A threat to independence is not acceptable if it either: 1. could impact the auditor's ability to perform an audit without being affected by influences that compromise professional judgment or 2. could expose the auditor or audit organization to circumstances that would cause a reasonable and informed third party to conclude that the integrity, objectivity, or professional skepticism of the audit organization, or a member of the audit team, had been compromised. Note: If auditor or firm are CPAs, then the AICPA Code also applies with it's specific prohibitions for audits and other attestation engagements. Just like the AICPA Code, the government is also concerned about the perception of an impairment by a reasonable person as it would casts doubt as to the reliability of the audit results, which generally offers assurances to taxpayers that they tax dollars were spent appropriately, without fraud, waste or abuse.
32
Threats to Independence--Other Services
The standards: * Include specific non-audit/attest services that can impair independence. * Exclude some prohibited services when they are just informal advice provided during the audit or attest engagement and no separate report is issued. * Forbid the use of safeguards for certain prohibited services as they are always an impairment to auditor independence. Again, the independence standards for governmental audits are more similar to AICPA's Code than they are different. This should make compliance easier.
33
Services That Always Impair Independence
* Assuming management responsibilities * Some portion, but not all, of these activities: 1. Preparing accounting records and financial statements 2. Internal audit assistance 3. Internal control monitoring 4. Nontax disbursement 5. Benefit plan administration 6. Investment—Advisory or management 7. Corporate finance - Consulting or advisory 8. Executive or employee personnel matters 9. Business risk consulting 10. IT services 11. Valuation services These are the services where use of safeguards to minimize the risk to auditor independence is not allowed. Some of these services are also prohibited of CPAs performing under the AICPA Code and on audits of public companies under SEC and PCAOB rules.
34
Internal Auditors: IIA on Independence
Governmental internal auditors who work under the direction of the audited entity's management are considered independent for the purposes of reporting internally if the head of the audit organization meets all of the following criteria: 1. is accountable to the head or deputy head of the government entity or to those charged with governance; 2. reports the audit results both to the head or deputy head of the government entity and to those charged with governance; 3. is located organizationally outside the staff or line-management function of the unit under audit; 4. has access to those charged with governance; and 5. is sufficiently removed from political pressures to conduct audits and report findings, opinions, and conclusions objectively without fear of political reprisal. Internal auditors are encouraged to follow the Institute of Internal Auditors' Code of Ethics that we discussed in Module 3. But the Code must be followed if the internal audit is a Certified Internal Auditor or if the internal audit department says that they follow IIA standards when performing their audit and consulting services in their reports. For the critical element of independence and objectivity, the key is who the internal audit department reports to and whether they have ready access to an independent governing board or committee of the board so that they can be forced to hide negative findings