APPENDIX A
Section 404 Cost / Benefit Study
Draft Questions for Survey
Terms used in Survey |
Definition |
Fiscal year (FY) |
Represents fiscal years which begin in the year listed. For example, for a calendar year company, “FY 2007” would represent the fiscal year beginning on 1/1/07 and ending 12/31/07. |
ICFR |
Internal control over financial reporting |
Management assessment |
Management assessment of the effectiveness of ICFR under 404(a) of the Sarbanes-Oxley Act of 2002 |
External audit |
External audit of the effectiveness of ICFR under 404(b) of the Sarbanes-Oxley Act of 2002 |
AS 5 |
PCAOB Auditing Standard No. 5 |
General Information (All filers)
Company name
CIK (Edgar identifier)
Position of individual completing survey
Chief Executive Officer
Chief Financial Officer
Chief Accounting Officer
Controller
Vice-President Finance
Audit committee member
Other (_______________)
What is your fiscal year end?
How long has your company had an outside audit of ICFR as required under Section 404(b)? (The appropriate survey where respondent will be directed is in parentheses.)
Since FY 2004 (Accelerated Filer)
Since FY 2005 (Accelerated Filer)
Since FY 2006 (Accelerated Filer)
This is our first year having an outside audit as required under Section 404 (b).
Are you a foreign private issuer? Y/N (If Yes, Newly Accelerated Filer-Foreign else Newly Accelerated Filer-Domestic)
Our company has never had an outside audit as required under Section 404(b) but will furnish a management assessment of ICFR this year as required under Section 404(a). (Non-Accelerated Filer)
Our company has, in the past, conducted an ICFR as required under Section 404(b) but is no longer required to do so as our filing status has changed.
Our company voluntarily conducts an ICFR as required under Section 404(b) but is not required to do so by our filing status as a non-accelerated filer. (Accelerated Filer)
Question 5 will move the respondent to a separate survey that is modified according to their compliance with Section 404 for a total of 4 separate surveys (accelerated, newly accelerated (domestic), newly accelerated (foreign) and non-accelerated).
Audit Costs (Accelerated Filers)
Did any of the following events have an impact on the level of total auditing costs for FY 2007 as compared to FY 2006? Please note whether any part of the change is attributable to the audit of ICFR.
Change in |
Change |
Attributable to ICFR |
Material Acquisition/Divestiture |
Y/N/NA |
Y/N/NA |
In the number of hours the auditor needed to conduct the audit |
|
|
In the average hourly rate billed by the auditor |
|
|
In the number of internal audit staff/employee hours |
|
|
In the work of others not listed |
|
|
Adoption of new accounting and auditing pronouncements |
|
|
Other material events (_____________) |
|
|
For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?
Increased <10%
Increased 10% - 30%
Increased 30-50%
Increased 50% +
Decreased <10%
Decreased 10% - 30%
Decreased 30-50%
Decreased 50% +
Does the company have an internal audit department or a similar function?
If yes, for each year, please indicate how many employees are in your internal audit department:
Number of employees: 2006
Number of employees: 2007
The company does not have an internal audit department.
How many FTEs (throughout your company) were used in compliance with Section 404 in FY 2006 and FY 2007?
FTE employees used for compliance with Section 404: FY 2006
FTE employees used for compliance with Section 404: FY 2007
Has there been a change in the amount of work needed for the FY 2007 external audit of the company’s ICFR in any of the following areas? If so, please indicate the appropriate effect on audit costs.
3
Scoping, such as the accounts and processes selected for audit
Significantly reduced the audit costs
Moderately reduced the audit costs
Did not have an impact on audit costs
Moderately increased audit costs
Significantly increased audit costs
No change in the amount of work needed
The number of areas requiring walkthroughs
Significantly reduced the audit costs
Moderately reduced the audit costs
Did not have an impact on audit costs
Moderately increased audit costs
Significantly increased audit costs
No change in the amount of work needed
The number of controls subject to testing
Significantly reduced the audit costs
Moderately reduced the audit costs
Did not have an impact on audit costs
Moderately increased audit costs
Significantly increased audit costs
No change in the amount of work needed
Number of company locations selected for audit
Significantly reduced the audit costs
Moderately reduced the audit costs
Did not have an impact on audit costs
Moderately increased audit costs
Significantly increased audit costs
No change in the amount of work needed
What percentage of your audit costs for FY 2007 do you estimate is attributable to the external audit of ICFR as required under Section 404(b)?
Less than 5%
5-10%
11-20%
21-30%
31-40%
41-50%
Greater than 50%
Cannot estimate
How has the percentage of audit costs attributable to the external audit of ICFR as required under Section 404(b) changed over the past fiscal year?
The percentage of audit costs has significantly increased over the past fiscal year
The percentage of audit costs has moderately increased over the past fiscal year
The percentage of audit costs has not changed over the past fiscal year
The percentage of audit costs has moderately declined over the past fiscal year
The percentage of audit costs has significantly declined over the past fiscal year
To your knowledge, has your company’s auditor implemented more of a risk-based approach to your audit of ICFR since the introduction of Auditing Standard No. 5?
Initiated more of a risk-based approach
No change in the approach
Less of a risk-based approach
Do not know
Based on discussions with your auditor, have you experienced any changes in your audit costs in FY 2007 as a result of the adoption of AS 5?
Audit costs are significantly reduced as a result of the adoption of AS 5
Audit costs are moderately reduced as a result of the adoption of AS 5
Audit costs remained the same as a result of the adoption of AS 5
Audit costs are moderately increased as a result of the adoption of AS 5
Audit costs are significantly increased as a result of the adoption of AS 5
No information
Audit Costs (Newly Accelerated Filers-Domestic)
6. Did any of the following events have an impact on the change in the level of total auditing costs for FY 2007 as compared to FY 2006? Please note whether any part of the change is attributable to the audit of ICFR.
Change in |
Change |
Attributable to ICFR |
Material Acquisition/Divestiture |
Y/N/NA |
Y/N/NA |
In the number of hours the auditor needed to conduct the audit |
|
|
In the average hourly rate billed by the auditor |
|
|
In the number of internal audit staff/employee hours |
|
|
In the work of others not listed |
|
|
Adoption of new accounting and auditing pronouncements in the US |
|
|
Other material events (_____________) |
|
|
For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?
Increased <10%
Increased 10% - 30%
Increased 30-50%
Increased 50% +
Decreased <10%
Decreased 10% - 30%
Decreased 30-50%
Decreased 50% +
7. If your company used the expertise of an outside consultant to prepare for the external audit of ICFR as required by Section 404(b), what type of consultant did you employ?
CPA firm
IT firm
SOX-specific consultant
Other
Did not use an outside consultant
8. Approximately how much money did the company spent on the services of an outside consultant that is related to compliance with Section 404(b)?
0-$25,000
$25,001-$50,000
$50,001-$100,000
$100,000-$250,000
Greater than $250,000
The company did not use an outside consultant
9. Does the company have an internal audit department or a similar function?
If yes, for each year, please indicate how many employees are in your internal audit department:
Number of employees: FY 2006
Number of employees: FY 2007
The company does not have an internal audit department.
10. How many FTEs (throughout your company) are used in compliance with Section 404(b) in 2007?
Answer only if any FTE employees used for compliance with Section 404(b) in FY 2006
FTE employees used for compliance with Section 404(b): FY 2007
11. Please rank the following tasks in order of the effect on audit costs associated with complying with Section 404(b).
Scoping, such as the accounts and processes selected for audit
The number of areas requiring walkthroughs
The number of controls subject to testing
Number of company locations selected for audit
12. What percentage of your audit costs for FY 2007 do you estimate is attributable to the external audit of ICFR as required under Section 404(b)?
Less than 5%
5-10%
11-20%
21-30%
31-40%
41-50%
Greater than 50%
Cannot estimate
Audit Costs (Newly Accelerated Filers-Foreign)
6. What percentage of your shares do you estimate are held by US investors?
less than 10%
10-25%
26-50%
Greater than 50%
Cannot estimate
7. Does your company distribute your management report and audit report on ICFR to shareholders? Y/N
8. Are you required by your home country rules and/or regulations to have a form of reporting on internal controls? If yes, how much overlap is there in between the requirements of your home country and the US?
The rules and/or regulations have significant overlap
The rules and/or regulations have moderate overlap
The rules and/or regulations have minor overlap
There is no overlap
Our company’s home country does not have any rules or regulations regarding internal control reporting.
9. Did any of the following events have an impact on the change in the level of total auditing costs associated with compliance with US securities regulations for FY 2007 as compared to FY 2006? Please note whether any part of the change is attributable to the audit of ICFR.
Change in |
Change |
Attributable to ICFR |
Material Acquisition/Divestiture |
Y/N/NA |
Y/N/NA |
In the number of hours the auditor needed to conduct the audit |
|
|
In the average hourly rate billed by the auditor |
|
|
In the number of internal audit staff/employee hours |
|
|
In the work of others not listed |
|
|
Adoption of new accounting and auditing pronouncements |
|
|
Other material events (_____________) |
|
|
For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?
Increased <10%
Increased 10% - 30%
Increased 30-50%
Increased 50% +
Decreased <10%
Decreased 10% - 30%
Decreased 30-50%
Decreased 50% +
10. If your company used the expertise of an outside consultant to prepare for the external audit of ICFR as required by Section 404(b), what type of consultant did you employ?
CPA firm
IT firm
SOX-specific consultant
Other
Did not use an outside consultant
11. Approximately how much money did the company spent on the services of an outside consultant that is related to compliance with Section 404(b)?
0-$25,000
$25,001-$50,000
$50,001-$100,000
$100,000-$250,000
Greater than $250,000
The company did not use an outside consultant
12. Does the company have an internal audit department or a similar function?
If yes, for each year, please indicate how many employees are in your internal audit department:
Number of employees: FY 2006
Number of employees: FY 2007
The company does not have an internal audit department.
13. How many FTEs (throughout your company) are used in compliance with Section 404(b) in FY 2007?
Answer only if any FTE employees used for compliance with Section 404(b) in FY 2006
FTE employees used for compliance with Section 404(b): FY 2007
14. Please rank the following tasks in order of the effect on audit costs associated with complying with Section 404(b).
Scoping, such as the accounts and processes selected for audit
The number of areas requiring walkthroughs
The number of controls subject to testing
Number of company locations selected for audit
15. What percentage of your audit costs for FY 2007 do you estimate is attributable to the external audit of ICFR as required under Section 404(b)?
Less than 5%
5-10%
11-20%
21-30%
31-40%
41-50%
Greater than 50%
Cannot estimate
Audit Costs (Non-Accelerated Filers)
6. Did any of the following events have an impact on the change in the level of total auditing costs for FY 2007 as compared to FY 2006?
Change in |
Change |
Material Acquisition/Divestiture |
Y/N/NA |
In the number of hours the auditor needed to conduct the audit |
|
In the average hourly rate billed by the auditor |
|
In the number of internal audit staff/employee hours |
|
In the work of others not listed |
|
Adoption of new accounting and auditing pronouncements |
|
Other material events (_____________) |
|
For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?
Increased <10%
Increased 10% - 30%
Increased 30-50%
Increased 50% +
Decreased <10%
Decreased 10% - 30%
Decreased 30-50%
Decreased 50% +
7. Is your company using the expertise of an outside consultant to prepare for a future external audit of ICFR as required under Section 404(b)? If so what type of consultant do you employ?
CPA firm
IT firm
SOX-specific consultant
Other
Did not use an outside consultant
8. Approximately how much money did the company spent on the services of an outside consultant that is related to future compliance with Section 404(b)?
0-$25,000
$25,001-$50,000
$50,001-$100,000
$100,000-$250,000
Greater than $250,000
The company did not use an outside consultant
9. Are any of your audit costs due to preparation for a future compliance with Section 404(b)? If so, please estimate the percentage for FY 2007:
Less than 1%
1-5%
6-10%
11-20%
Greater than 20%
None of our company’s audit costs are due to preparation for future compliance with Section 404 (b)
Cannot estimate
Management Assessment (All Accelerated Filers)
The purpose of these questions is to determine the factors that influence management assessment of internal controls over financial reporting. Unless requested, please do not include auditor attestation of ICFR in your answer.
What percentage of management and company staff time was needed to conduct the company’s FY 2007 management assessment of ICFR? (Please note that the amount of time should add to 100%.) In addition, please note whether the amount of time spent on a particular task has increased, decreased or remain unchanged.
|
% of Time |
Change
|
Identifying risks to your company’s financial reporting |
|
|
Identifying controls that address the risks identified |
|
|
Documenting the controls identified that address the risk |
|
|
Evaluating (including testing) the operating effectiveness of controls |
|
|
Evaluating any identified deficiencies to determine if they were material weaknesses |
|
|
Developing disclosures or SEC filings related to management assessment |
|
|
OTHER (_______________________) |
|
|
To what degree did coordination with the external auditor influence the manner by which your company structured its management assessment of ICFR in FY 2007?
Significantly – i.e., attempted to maximize auditor reliance on assessment to minimize audit costs
Moderately
Minimally
Not at all – structured management assessment to minimize internal effort
How did the amount of coordination with the external auditor to conduct the management assessment change from FY 2006 to FY 2007?
The amount of coordination increased significantly
The amount of coordination increased moderately
The amount of coordination increased did not change
The amount of coordination decreased significantly
The amount of coordination decreased moderately
Did not coordinate with our external auditor
Please indicate the approximate number of employee/management hours required to conduct the management assessment of ICFR in FY 2006 and FY 2007:
FY 2006 (_______________ response provided via drop down menu)
FY 2007(________________response provided via drop down menu)
Please indicate the change in the role of your company’s internal audit (or group with similar function) in management assessment process between FY 2006 and FY 2007
The role of the internal audit department increased significantly – had primary responsibility for gathering evidence
The role of the internal audit department increased moderately
The role of the internal audit department did not change
The role of the internal audit department decreased moderately
The role of the internal audit department decreased significantly
The company does not have an internal audit department
If your company used the expertise of an outside consultant during the conduct of your management assessment in FY 2007, what type of consultant did you employ?
CPA firm
IT firm
SOX-specific consultant
Other
Did not use an outside consultant
What services did the consultant(s) provide? (more than one answer may be checked)
Identification of controls to be tested for the management assessment
Evaluating the effectiveness of the controls
Developing disclosures related to management assessment
Additional personnel hours need to conduct the management assessment
Changes in IT system needed to conduct the management assessment
Substitution of consultant hours for internal hours
Other
Did not use an outside consultant
Approximately how much money in FY 2007 did the company spent on the services of an outside consultant that is related management assessment?
0-$25,000
$25,001-$50,000
$50,001-$100,000
$100,000-$250,000
Greater than $250,000
The company did not use an outside consultant
The following statements cover aspects management assessment that may have changed from 2006 to 2007 because of the issuance by the SEC of interpretive guidance for management in conducting its assessment of ICFR. Please indicate the extent of the change in the following:
The scope of your company’s management assessment, including the number of risks subject to testing.
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
The number of locations included in your company’s management assessment (ignoring changes in your company’s operations).
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
The level of documentation your company maintained in support of its assessment.
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
The number of controls subject to your company’s management assessment.
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
The nature, timing and extent of evidence gathered as part of your assessment.
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
The extent to which the company utilized “daily interaction” to support its assessment that controls were operating effectively.
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
The extent to which management relied on evidence gained from self-assessments.
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
The extent to which management relied on evidence gained from direct testing.
Significantly reduced
Moderately reduced
No effect
Moderately increased
Significantly increased
Management Assessment (Non-Accelerated Filers)
The purpose of these questions is to determine the factors that influence management assessment of internal controls over financial reporting. Unless requested, please do not include auditor attestation of ICFR in your answer.
What percentage of management and company staff time was needed to conduct the company’s FY 2007 management assessment of ICFR? (Please note that the amount of time should add to 100%.)
|
% of Time |
Identifying risks to your company’s financial reporting |
|
Identifying controls that address the risks identified |
|
Documenting the controls identified that address the risk |
|
Evaluating (including testing) the operating effectiveness of controls |
|
Evaluating any identified deficiencies to determine if they were material weaknesses |
|
Developing disclosures or SEC filings related to management assessment |
|
OTHER (_______________________) |
|
Please indicate the approximate number of employee/management hours required to conduct the management assessment of ICFR in FY 2007:
Does the company have an internal audit department or a similar function?
If yes, for each year, please indicate how many employees are in your internal audit department:
Number of employees: FY 2006
Number of employees: FY 2007.
The company does not have an internal audit department.
Please indicate the role of your company’s internal audit (or group with similar function) in management assessment process in FY 2007
Significant – had primary responsibility for gathering evidence
Moderate –
Minimal
The company does not have an internal audit department.
If your company used the expertise of an outside consultant during the conduct of your management assessment in FY 2007, what type of consultant did you employ?
CPA firm
IT firm
SOX-specific consultant
Other
Did not use an outside consultant
What services did the consultant(s) provide? (more than one answer may be checked)
Identification of controls to be tested for the management assessment
Evaluating the effectiveness of the controls
Developing disclosures related to management assessment
Additional personnel hours need to conduct the management assessment
Changes in IT system needed to conduct the management assessment
Substitution of consultant hours for internal hours
Other
Did not use an outside consultant
Approximately how much money in FY 2007 did the company spent on the services of an outside consultant that is related to management assessment?
0-$25,000
$25,001-$50,000
$50,001-$100,000
$100,000-$250,000
Greater than $250,000
The company did not use an outside consultant
To what degree did the following influence the manner by which your company structured its management assessment of ICFR in FY 2007?
Coordination with your external auditor
Significantly i.e., attempted to maximize auditor reliance on assessment to minimize audit costs
Moderately
Minimally
Not at all – structured management assessment to minimize internal effort
The consideration of entity-level controls and how they impacted the number of controls and level of evidence needed to support the assessment
Significantly
Moderately
Minimally
Not at all
Reliance on evidence gained from self-assessments
Significantly
Moderately
Minimally
Not at all
Reliance on evidence gained from direct testing
Significantly
Moderately
Minimally
Not at all
Benefits of Compliance With Section 404 (All Filers)
Based on the Company’s experiences under Section 404 of the Sarbanes-Oxley Act, please indicate the extent to which you agree with the following the statement:
Compliance with Section 404 has had a positive impact on the company’s internal control structure.
Strongly agree
Agree
No opinion
Disagree
Strongly disagree
Compliance with Section 404 has increased the audit committee’s confidence in the company’s ICFR.
Strongly agree
Agree
No opinion
Disagree
Strongly disagree
Compliance with Section 404 has improved the quality of the company’s financial reporting.
Strongly agree
Agree
No opinion
Disagree
Strongly disagree
Compliance with Section 404 has increased the company’s ability to prevent and detect fraud.
Strongly agree
Agree
No opinion
Disagree
Strongly disagree
Compliance with Section 404 has reduced the company’s cost of capital.
Strongly agree
Agree
No opinion
Disagree
Strongly disagree
Other benefits of compliance not described above:
_________________________________
_________________________________
_________________________________
In your opinion, has the SEC been responsive to the concerns of public companies and smaller public companies regarding the cost of complying with the Section 404 requirements?
Very responsive
Somewhat responsive
No opinion
Not responsive
Please check the boxes below regarding any prior surveys in which you have participated on the costs of Section 404 compliance:
FEI
CRA International
Foley and Lardner
Deloitte
Greater Boston Chamber of Commerce
Independent Community Bankers of America
NASDAQ
AEA
KPMG
The Lord & Benoit Report
Other ____________________
Have not participated in any prior surveys
If you have additional information which you feel is relevant to any of the preceding questions, or if you have comments on what that you think the SEC can do to improve the costs of compliance associated with Section 404, please feel free to express your views below:
_______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________
Would you be willing to provide contact information so that we may follow up if necessary?
Name (_______________)
Address (_______________)
Phone number (_______________)
Email address (_______________)
File Type | application/msword |
File Title | 404 Cost / Benefit Study |
Author | JonesJo |
Last Modified By | crawleyp |
File Modified | 2008-04-10 |
File Created | 2008-04-10 |