Material weaknesses 1970



  • Hi,
    I just wanted to know, when assessing an item as material in order to determine whether an issue is a material weakness or a significant deficiency, is the percentage materiality taken at entity level, or group level?
    Thanks.



  • A material weakness is determined at the top level.
    If you think about it, each location could have a different materiality level when standing on its own. However, some locations are scoped out due to materiality to the consolidated group. What is material to a small subsidiary could be very immaterial to the consolidated financial statements on which the overall controls assessment is based.



  • Materiality must be set at Group level and applied consistently throughout the business. Group may however wish to apply a different, but again consistent, materiality for the entities as an early warning system to identify large errors that could be deemed material in aggregate when consolidated at group level but which, at the individual entity level, would not breach the group materiality figure.



  • Thanks for that.
    I have 2 other questions as part of the evaluation of deficiencies in aggregate (as part of assessment as to whether or not a material weaknesse exists):

    1. When evaluating potential magnitudes for misstatement - is the value for each deficiency taken as the value of the sample from which a controls deficency was identifed, or from the balance as a total for the year?
    2. Cit be stated that the magnitude for mistatement is inconsequential, if, say, the error was a lack of say- sign off rather than an actual identiied misstatement to the accounts?
      Thank you again.


    1. I expect there should be lots of caveats around answering this question. In essence I would evaluate the deficiency in light of the sample taken and apply it to the total of the balance from which the sample was taken. Does that make sense? %0AHow you evaluate it will depend on how you selected your sample. It will also depend on whether you can identify a commonality amongst the deficiencies you have found which will enable you to ring fence where the deficiency is likely to occur and hopefully minimise the impact of the deficiency.%0A2. No and yes. It cannot be inconsequential if it is a key control but if the sign-off is evidence of review then you can look for other evidence that the review, hence the control, has taken place - for example written notes, comments, e-mails, etc. Then there is the question of other controls you have tested that you can point to from your COSO, COBIT general control testing which may help you minimise/mitigate the impact of the deficiency.%0AI must admit that this is where I find it all a bit nebulus:%0A- If a key control works it means that there is unlikely to be a material misstatement and any error to the accounts as a result of that control is evidence that the control is actually working and therefore not a SOX error. %0A- If the control is not working then you are left with a year of ineffective control and the question then is not whether an error has occurred and to what amount but whether an error could have occurred and to what extent. If, for example, there is no sign-off on invoivces throughout the year how do quantify the likely error - 100%, 50%, 5% …suddenly you are trying to come up with a ‘scientific’ process to determine the length of your string. Obviously you never let it get that far, I guess, but in my area all identified deficiencies have had this degree of uncertainty.


  • Thanks for that Wrightlot. I’m inclined to agree with you.%0A I have tried to focus on what else is done in regards to financial reports in order to compensate any control deficiency identified, such as CFO review at final stage etc…%0AI am also wondering at what threshold is the materiality set for material weaknesses. Training I received when in the Big 4 points to 4 or 5% of PBT as the rule of thumb, but management here has questioned whether or not Profit after Tax can also be used if there is a tax credit available to increase the materiality.



  • I do know of those that have applied 5% of PAT, as well as 5% of PBT, 0.5% of assets and even a combination of these. All I can suggest is that:%0A1. You tell your external auditors your definition of materiality to ensure that they have no material concerns%0A2. Find out what your external auditor’s materiality threshold is so that you are comfortable that if you apply a higher threshold there is no risk that they may uncover something that you descoped (we compared ours and found them to be slightly different so we ensured that we have covered everything they have deemed to be in scope).



  • Thanks.
    We have coverd this in regard to scoping, but have a year-end adjustment which may have arisen due to an ineffective control in one area.
    We are just trying to determine whether it is a signficant deficiency of a material weakness before we issue our 20-F. We are a self-assessment FPI for 2006 so we were hoping to determine our own conclusion prior to issuing our controls deficiencies log to the auditors for review.
    It may be that it is just something to discuss with our auditors once they have received the report.



  • but have a year-end adjustment which may have arisen due to an ineffective control in one area.

    Some questions to consider.

    1. Who identified the item requiring adjustment, management or the auditors? If the former one could argue that this arose from your own control processes.
    2. How material is the adjustment?
    3. Is it genuinely an erroneous transaction/entry or is it a matter of judgement? Adjustments arising from matters of judgement do not (necessarily) constitute a control deficiency
    4. Can it be justified as a one-off incident? Again not all errors necessarily consitute a control deficiency.


  • Denis,%0A I am afraid that it was unfortunately identified by our auditors, and I wouldconfirm it as a control deficiency as the corresponding control that we had in place was found to be ineffective a few days later by ourselves (this is why I don’t think it can be taken as a matter of judgement or once -off).%0AWith our FPI expemtion from auditor attestation, they took to testing controls before us, and received priority from the Finance department%0A Silly mistake that was based on a lack of confirmation of customer collection from third party warehouse location . It was not not chased up by sales dept (due to Christmas holiday rush). %0AThe adjustment is definitely material at 5% PBT level, but only significant when taken at 5% PAT level due to tax credits. Reviews for the potential of a higher misstatement have determined that this is the only misstatement.



  • I think you could argue that as the auditors were testing ahead of you - and presumably they understood that this was the case - that your own control processes would have (and in fact did by the sounds of things) picked up the error.



  • I don’t know that I agree with Denis. It sounds like your control failed. You may or may not have have caught the failure as part of your SOX testing. I guess that I do not see SOX testing as part of controls over financial reporting.
    Given the magnitude, this is certainly a significant deficiency and maybe a material weakness. Does your external auditor have a point of view on this? Did your original SOX scoping identify bright lines for significant and material controls weaknesses? We use EPS for our guidelines. If you do that, then you will benefit from your net tax credits increasing your limits. Just make certain that you tax-effect the error when measuring it.



  • I read it slightly differently - goes to show how this stuff can be subjective - in that I thought EMM was saying that their testing uncovered an error which was material (albeit the auditors found it first) which to me is not necessarily a control deficiency. After all we do design controls to pick up errors.



  • To Clarify:
    Our controls testing over cut off proved to be ineffective because it did not identify goods for collection as opposed to shipment. It was not anticipated, because it was never communicated to us prior to year-end that customers would ever have items for collection.
    Therefore, i do not see that we have any argument against our ext auditors’ findings.
    I am hoping to discuss the definition of materiality with them towards the end of the week when our final reports are to be submitted to them.
    Due to the lack of auditor attestation this year, they have made no effort whatsoever to liase with me in regards to any of their findings. The Audit Director has a tendency not to disclose items until final reporting date even on a normal basis (which I find infuriating because it does not allow us to provide evidence of compensating controls).
    This issue was disclosed to me by the CFO. At this stage, I don’t even know what else they may have identified.



  • I agree with your statement Denis that we do design controls to pick up errors. The fact that the SOX testing picked up the error is not what I would consider a control, however, and would require remdiation and re-testing to satisfy SOX requirements. Not that this makes EMM’s predicament any better.
    EMM, is the control a regular ‘BAU’ control or a one off year-end control? If the later I believe you still have time to remediate as I believe year-end controls can be remediated after year-end cut off if actioned appropriately before the accounts are finalised. I also concur with the comments above that the fact the auditors tested before you did is irrelevant (in fact I would have taken them to task myself as they should really only be testing controls once I had tested them so that they can establish the effectiveness of my testing and decide what reliance they can place on it for their own comfort).
    I also understand completely your frustration with your auditor. The firms seem to have struggled to comprehend the need for a different approach when dealing with SOX (eg regular formal updates) as opposed to their normal approach to the external audit of just waiting until the very end and dumping everuything in your lap.



  • Wrightlot.
    The control is a BAU (systems billed but not shipped and shipped but not billed report reviews) and herein lies the weakness - the item was not picked up by the system as the stock was left for collection in a third party expeditor warehouse.
    Whilst we could argue that as sales are ex-works, there is little else we can do here to monitor such collections, but Finance have accepted the error as an adjustment to our financial statements, which leaves us wth very little legroom.
    Upon immediate identification, finance performed a full manual cut -off assessment and intend to do so each qtr for the current year ( in the hope that this prevents such errors being identified by the auditors before it can be remediated).
    For now - I don’t think there is much we can do.


Log in to reply