Detection and Severity Classifications of Sarbanes-Oxley Section 404 Internal Control Deficiencies

ABSTRACT: We examine detection and severity classification of internal control deficiencies (ICD) identified under Section 404 of the Sarbanes-Oxley Act of 2002. While the cost/benefit balance of auditor testing of internal controls is highly controversial, prior research has not examined auditor versus client detection of ICD, nor has it examined factors auditors consider in judging ICD severity. We find that auditors detect about three-fourths of unremediated ICD, usually though control testing. This finding contrasts with extant research inferring control deficiency detection effectiveness from publicly available data, underscoring the value of Section 404 auditor testing in improving financial reporting quality. Auditors judge greater severity when a misstatement has already occurred. In the absence of a misstatement, severity is contingent on client and ICD characteristics, implying a more complex and nuanced judgment process without objective evidence of control failure. We also find that clients of...

[1]  Jacqueline S. Hammersley,et al.  Market reactions to the disclosure of internal control weaknesses and to the characteristics of those weaknesses under section 302 of the Sarbanes Oxley Act of 2002 , 2007 .

[2]  Mario J. Maletta,et al.  The Contribution of Internal Audit as a Determinant of External Audit Fees and Factors Influencing this Contribution , 2001 .

[3]  Yinghong Zhang,et al.  Costs to Comply with SOX Section 404 , 2008 .

[4]  Indranil R. Bardhan,et al.  The Role of the Internal Audit Function in the Disclosure of Material Weaknesses , 2010 .

[5]  Brian W. Mayhew,et al.  The Effect of Accounting Uncertainty and Auditor Reputation on Auditor Independence , 2000 .

[6]  H. Tan,et al.  Effects of Authoritative Guidance Availability and Audit Committee Effectiveness on Auditors' Judgments in an Auditor‐Client Negotiation Context , 2003 .

[7]  Reducing Management's Influence on Auditors' Judgments: An Experimental Investigation of SOX 404 Assessments , 2008 .

[8]  Jean C. Bedard,et al.  INTERNAL CONTROL QUALITY AND AUDIT PRICING UNDER THE SARBANES-OXLEY ACT , 2008 .

[9]  C. J. Wolfe,et al.  Concede or Deny: Do Management Persuasion Tactics Affect Auditor Evaluation of Internal Control Deviations? , 2009 .

[10]  Andrew J. Leone,et al.  Factors related to internal control disclosure: A discussion of Ashbaugh, Collins, and Kinney (2007) and Doyle, Ge, and McVay (2007) , 2007 .

[11]  R. Houston,et al.  Audit committee support for auditors: The effects of materiality justification and accounting precision , 2003 .

[12]  M. W. Nelson,et al.  Evidence from Auditors About Managers' and Auditors' Earnings-Management Decisions , 2001 .

[13]  Arnold M. Wright,et al.  Corporate Governance and the Audit Process , 2002 .

[14]  Weili Ge,et al.  Determinants of Weaknesses in Internal Control over Financial Reporting , 2006 .

[15]  Dana R. Hermanson,et al.  Auditor Risk Assessment: Insights from the Academic Literature , 2006 .

[16]  Jean C. Bedard,et al.  Audit Pricing and Internal Control Disclosures Among Non-Accelerated Filers , 2008 .

[17]  Jeffrey R. Cohen,et al.  Auditors' Consideration of Corporate Governance and Management Control Philosophy in Preplanning and Planning Judgments , 2000 .

[18]  William R. Kinney, Jr.,et al.  Do Control Effectiveness Disclosures Require SOX 404(b) Internal Control Audits? A Natural Experiment with Small U.S. Public Companies , 2010 .

[19]  R. Dodge.  Accounting for contingencies , 1991 .

[20]  Don N. Kleinmuntz,et al.  Determinants of the justifiability of performance in ill-structured audit tasks , 1997 .

[21]  William F. Messier,et al.  A Review and Integration of Empirical Research on Materiality: Two Decades Later , 2005 .

[22]  Michael L. Ettredge,et al.  Financial Executive Qualifications, Financial Executive Turnover, and Adverse SOX 404 Opinions , 2010 .

[23]  Brian W. Mayhew,et al.  The Effect of Accounting Uncertainty and Auditor Reputation on Auditor Objectivity , 2001 .

[24]  David F. Larcker,et al.  On the Use of Instrumental Variables in Accounting Research , 2008 .

[25]  William R. Kinney,et al.  The Effect of SOX Internal Control Deficiencies and Their Remediation on Accrual Quality , 2007 .

[26]  Rani Hoitash,et al.  Corporate Governance and Internal Control over Financial Reporting: A Comparison of Regulatory Regimes , 2008 .

[27]  D. R. Hermanson,et al.  Why Do Some Accelerated Filers with SOX Section 404 Material Weaknesses Provide Early Warning under Section 302 , 2009 .

[28]  William R. Kinney,et al.  The Discovery and Reporting of Internal Control Deficiencies Prior to SOX-Mandated Audits , 2007 .

[29]  Donald R. Deis,et al.  Auditors' Training and Proficiency in Information Systems: A Research Synthesis , 2009, J. Inf. Syst..

[30]  Mignona Cote,et al.  Committee of Sponsoring Organizations (COSO) , 2007, Information Security Management Handbook, 6th ed..

[31]  Robert D. Allen,et al.  A Longitudinal Field Investigation of Auditor Risk Assessments and Sample Size Decisions , 2003 .