Appendix A

404appA (2).doc

Study on the Impact of Companies' Compliance with the Requirements Implementing Section 404 of the Sarbanes-Oxley Act of 2002

APPENDIX A

OMB: 3235-0641

Document [doc]
Download: doc | pdf


APPENDIX A


Section 404 Cost / Benefit Study

Draft Questions for Survey


Terms used in Survey

Definition

Fiscal year (FY)

Represents fiscal years which begin in the year listed. For example, for a calendar year company, “FY 2007” would represent the fiscal year beginning on 1/1/07 and ending 12/31/07.

ICFR

Internal control over financial reporting

Management assessment

Management assessment of the effectiveness of ICFR under 404(a) of the Sarbanes-Oxley Act of 2002

External audit

External audit of the effectiveness of ICFR under 404(b) of the Sarbanes-Oxley Act of 2002

AS 5

PCAOB Auditing Standard No. 5


General Information (All filers)


  1. Company name


  1. CIK (Edgar identifier)


  1. Position of individual completing survey

    1. Chief Executive Officer

    2. Chief Financial Officer

    3. Chief Accounting Officer

    4. Controller

    5. Vice-President Finance

    6. Audit committee member

    7. Other (_______________)


  1. What is your fiscal year end?


  1. How long has your company had an outside audit of ICFR as required under Section 404(b)? (The appropriate survey where respondent will be directed is in parentheses.)

    1. Since FY 2004 (Accelerated Filer)

    2. Since FY 2005 (Accelerated Filer)

    3. Since FY 2006 (Accelerated Filer)

    4. This is our first year having an outside audit as required under Section 404 (b).

      1. Are you a foreign private issuer? Y/N (If Yes, Newly Accelerated Filer-Foreign else Newly Accelerated Filer-Domestic)

    5. Our company has never had an outside audit as required under Section 404(b) but will furnish a management assessment of ICFR this year as required under Section 404(a). (Non-Accelerated Filer)

    6. Our company has, in the past, conducted an ICFR as required under Section 404(b) but is no longer required to do so as our filing status has changed.

    7. Our company voluntarily conducts an ICFR as required under Section 404(b) but is not required to do so by our filing status as a non-accelerated filer. (Accelerated Filer)


Question 5 will move the respondent to a separate survey that is modified according to their compliance with Section 404 for a total of 4 separate surveys (accelerated, newly accelerated (domestic), newly accelerated (foreign) and non-accelerated).

Audit Costs (Accelerated Filers)


  1. Did any of the following events have an impact on the level of total auditing costs for FY 2007 as compared to FY 2006? Please note whether any part of the change is attributable to the audit of ICFR.


Change in

Change

Attributable to ICFR

Material Acquisition/Divestiture

Y/N/NA

Y/N/NA

In the number of hours the auditor needed to conduct the audit



In the average hourly rate billed by the auditor



In the number of internal audit staff/employee hours



In the work of others not listed



Adoption of new accounting and auditing pronouncements



Other material events (_____________)




For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?

    1. Increased <10%

    2. Increased 10% - 30%

    3. Increased 30-50%

    4. Increased 50% +

    5. Decreased <10%

    6. Decreased 10% - 30%

    7. Decreased 30-50%

    8. Decreased 50% +


  1. Does the company have an internal audit department or a similar function?

    1. If yes, for each year, please indicate how many employees are in your internal audit department:

      1. Number of employees: 2006

      2. Number of employees: 2007

    2. The company does not have an internal audit department.


  1. How many FTEs (throughout your company) were used in compliance with Section 404 in FY 2006 and FY 2007?

    1. FTE employees used for compliance with Section 404: FY 2006

    2. FTE employees used for compliance with Section 404: FY 2007


  1. Has there been a change in the amount of work needed for the FY 2007 external audit of the company’s ICFR in any of the following areas? If so, please indicate the appropriate effect on audit costs.



3

    1. Scoping, such as the accounts and processes selected for audit

      1. Significantly reduced the audit costs

      2. Moderately reduced the audit costs

      3. Did not have an impact on audit costs

      4. Moderately increased audit costs

      5. Significantly increased audit costs

      6. No change in the amount of work needed

    2. The number of areas requiring walkthroughs

      1. Significantly reduced the audit costs

      2. Moderately reduced the audit costs

      3. Did not have an impact on audit costs

      4. Moderately increased audit costs

      5. Significantly increased audit costs

      6. No change in the amount of work needed

    3. The number of controls subject to testing

      1. Significantly reduced the audit costs

      2. Moderately reduced the audit costs

      3. Did not have an impact on audit costs

      4. Moderately increased audit costs

      5. Significantly increased audit costs

      6. No change in the amount of work needed

    4. Number of company locations selected for audit

      1. Significantly reduced the audit costs

      2. Moderately reduced the audit costs

      3. Did not have an impact on audit costs

      4. Moderately increased audit costs

      5. Significantly increased audit costs

      6. No change in the amount of work needed


  1. What percentage of your audit costs for FY 2007 do you estimate is attributable to the external audit of ICFR as required under Section 404(b)?

    1. Less than 5%

    2. 5-10%

    3. 11-20%

    4. 21-30%

    5. 31-40%

    6. 41-50%

    7. Greater than 50%

    8. Cannot estimate


  1. How has the percentage of audit costs attributable to the external audit of ICFR as required under Section 404(b) changed over the past fiscal year?

    1. The percentage of audit costs has significantly increased over the past fiscal year

    2. The percentage of audit costs has moderately increased over the past fiscal year

    3. The percentage of audit costs has not changed over the past fiscal year

    4. The percentage of audit costs has moderately declined over the past fiscal year

    5. The percentage of audit costs has significantly declined over the past fiscal year


  1. To your knowledge, has your company’s auditor implemented more of a risk-based approach to your audit of ICFR since the introduction of Auditing Standard No. 5?

    1. Initiated more of a risk-based approach

    2. No change in the approach

    3. Less of a risk-based approach

    4. Do not know

  1. Based on discussions with your auditor, have you experienced any changes in your audit costs in FY 2007 as a result of the adoption of AS 5?

  1. Audit costs are significantly reduced as a result of the adoption of AS 5

  2. Audit costs are moderately reduced as a result of the adoption of AS 5

  3. Audit costs remained the same as a result of the adoption of AS 5

  4. Audit costs are moderately increased as a result of the adoption of AS 5

  5. Audit costs are significantly increased as a result of the adoption of AS 5

  6. No information


Audit Costs (Newly Accelerated Filers-Domestic)


6. Did any of the following events have an impact on the change in the level of total auditing costs for FY 2007 as compared to FY 2006? Please note whether any part of the change is attributable to the audit of ICFR.


Change in

Change

Attributable to ICFR

Material Acquisition/Divestiture

Y/N/NA

Y/N/NA

In the number of hours the auditor needed to conduct the audit



In the average hourly rate billed by the auditor



In the number of internal audit staff/employee hours



In the work of others not listed



Adoption of new accounting and auditing pronouncements in the US



Other material events (_____________)




For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?

  1. Increased <10%

  2. Increased 10% - 30%

  3. Increased 30-50%

  4. Increased 50% +

  5. Decreased <10%

  6. Decreased 10% - 30%

  7. Decreased 30-50%

  8. Decreased 50% +


7. If your company used the expertise of an outside consultant to prepare for the external audit of ICFR as required by Section 404(b), what type of consultant did you employ?

  1. CPA firm

  2. IT firm

  3. SOX-specific consultant

  4. Other

  5. Did not use an outside consultant


8. Approximately how much money did the company spent on the services of an outside consultant that is related to compliance with Section 404(b)?

  1. 0-$25,000

  2. $25,001-$50,000

  3. $50,001-$100,000

  4. $100,000-$250,000

  5. Greater than $250,000

  6. The company did not use an outside consultant


9. Does the company have an internal audit department or a similar function?

  1. If yes, for each year, please indicate how many employees are in your internal audit department:

      1. Number of employees: FY 2006

      2. Number of employees: FY 2007

  1. The company does not have an internal audit department.


10. How many FTEs (throughout your company) are used in compliance with Section 404(b) in 2007?

  1. Answer only if any FTE employees used for compliance with Section 404(b) in FY 2006

  2. FTE employees used for compliance with Section 404(b): FY 2007


11. Please rank the following tasks in order of the effect on audit costs associated with complying with Section 404(b).

  1. Scoping, such as the accounts and processes selected for audit

  2. The number of areas requiring walkthroughs

  3. The number of controls subject to testing

  4. Number of company locations selected for audit


12. What percentage of your audit costs for FY 2007 do you estimate is attributable to the external audit of ICFR as required under Section 404(b)?

  1. Less than 5%

  2. 5-10%

  3. 11-20%

  4. 21-30%

  5. 31-40%

  6. 41-50%

  7. Greater than 50%

  8. Cannot estimate


Audit Costs (Newly Accelerated Filers-Foreign)


6. What percentage of your shares do you estimate are held by US investors?

  1. less than 10%

  2. 10-25%

  3. 26-50%

  4. Greater than 50%

  1. Cannot estimate


7. Does your company distribute your management report and audit report on ICFR to shareholders? Y/N


8. Are you required by your home country rules and/or regulations to have a form of reporting on internal controls? If yes, how much overlap is there in between the requirements of your home country and the US?

  1. The rules and/or regulations have significant overlap

  2. The rules and/or regulations have moderate overlap

  3. The rules and/or regulations have minor overlap

  4. There is no overlap

  5. Our company’s home country does not have any rules or regulations regarding internal control reporting.


9. Did any of the following events have an impact on the change in the level of total auditing costs associated with compliance with US securities regulations for FY 2007 as compared to FY 2006? Please note whether any part of the change is attributable to the audit of ICFR.


Change in

Change

Attributable to ICFR

Material Acquisition/Divestiture

Y/N/NA

Y/N/NA

In the number of hours the auditor needed to conduct the audit



In the average hourly rate billed by the auditor



In the number of internal audit staff/employee hours



In the work of others not listed



Adoption of new accounting and auditing pronouncements



Other material events (_____________)




For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?

  1. Increased <10%

  2. Increased 10% - 30%

  3. Increased 30-50%

  4. Increased 50% +

  5. Decreased <10%

  6. Decreased 10% - 30%

  7. Decreased 30-50%

  8. Decreased 50% +


10. If your company used the expertise of an outside consultant to prepare for the external audit of ICFR as required by Section 404(b), what type of consultant did you employ?

  1. CPA firm

  2. IT firm

  3. SOX-specific consultant

  4. Other

  5. Did not use an outside consultant


11. Approximately how much money did the company spent on the services of an outside consultant that is related to compliance with Section 404(b)?

  1. 0-$25,000

  2. $25,001-$50,000

  3. $50,001-$100,000

  4. $100,000-$250,000

  5. Greater than $250,000

  6. The company did not use an outside consultant


12. Does the company have an internal audit department or a similar function?

  1. If yes, for each year, please indicate how many employees are in your internal audit department:

  1. Number of employees: FY 2006

  2. Number of employees: FY 2007

  1. The company does not have an internal audit department.


13. How many FTEs (throughout your company) are used in compliance with Section 404(b) in FY 2007?

  1. Answer only if any FTE employees used for compliance with Section 404(b) in FY 2006

  2. FTE employees used for compliance with Section 404(b): FY 2007


14. Please rank the following tasks in order of the effect on audit costs associated with complying with Section 404(b).

  1. Scoping, such as the accounts and processes selected for audit

  2. The number of areas requiring walkthroughs

  3. The number of controls subject to testing

  4. Number of company locations selected for audit


15. What percentage of your audit costs for FY 2007 do you estimate is attributable to the external audit of ICFR as required under Section 404(b)?

  1. Less than 5%

  2. 5-10%

  3. 11-20%

  4. 21-30%

  5. 31-40%

  6. 41-50%

  7. Greater than 50%

  8. Cannot estimate

Audit Costs (Non-Accelerated Filers)


6. Did any of the following events have an impact on the change in the level of total auditing costs for FY 2007 as compared to FY 2006?


Change in

Change

Material Acquisition/Divestiture

Y/N/NA

In the number of hours the auditor needed to conduct the audit


In the average hourly rate billed by the auditor


In the number of internal audit staff/employee hours


In the work of others not listed


Adoption of new accounting and auditing pronouncements


Other material events (_____________)



For each answer marked “YES” under the “Change” column, please estimate the percent increase/decrease in total audit costs associated with the change?

  1. Increased <10%

  2. Increased 10% - 30%

  3. Increased 30-50%

  4. Increased 50% +

  5. Decreased <10%

  6. Decreased 10% - 30%

  7. Decreased 30-50%

  8. Decreased 50% +


7. Is your company using the expertise of an outside consultant to prepare for a future external audit of ICFR as required under Section 404(b)? If so what type of consultant do you employ?

  1. CPA firm

  2. IT firm

  3. SOX-specific consultant

  4. Other

  5. Did not use an outside consultant


8. Approximately how much money did the company spent on the services of an outside consultant that is related to future compliance with Section 404(b)?

  1. 0-$25,000

  2. $25,001-$50,000

  3. $50,001-$100,000

  4. $100,000-$250,000

  5. Greater than $250,000

  6. The company did not use an outside consultant


9. Are any of your audit costs due to preparation for a future compliance with Section 404(b)? If so, please estimate the percentage for FY 2007:

  1. Less than 1%

  2. 1-5%

  3. 6-10%

  4. 11-20%

  5. Greater than 20%

  6. None of our company’s audit costs are due to preparation for future compliance with Section 404 (b)

  7. Cannot estimate


Management Assessment (All Accelerated Filers)


The purpose of these questions is to determine the factors that influence management assessment of internal controls over financial reporting. Unless requested, please do not include auditor attestation of ICFR in your answer.


  1. What percentage of management and company staff time was needed to conduct the company’s FY 2007 management assessment of ICFR? (Please note that the amount of time should add to 100%.) In addition, please note whether the amount of time spent on a particular task has increased, decreased or remain unchanged.



% of Time

Change


Identifying risks to your company’s financial reporting



Identifying controls that address the risks identified



Documenting the controls identified that address the risk



Evaluating (including testing) the operating effectiveness of controls



Evaluating any identified deficiencies to determine if they were material weaknesses



Developing disclosures or SEC filings related to management assessment



OTHER (_______________________)




  1. To what degree did coordination with the external auditor influence the manner by which your company structured its management assessment of ICFR in FY 2007?

  1. Significantly – i.e., attempted to maximize auditor reliance on assessment to minimize audit costs

  2. Moderately

  3. Minimally

  4. Not at all – structured management assessment to minimize internal effort


  1. How did the amount of coordination with the external auditor to conduct the management assessment change from FY 2006 to FY 2007?

  1. The amount of coordination increased significantly

  2. The amount of coordination increased moderately

  1. The amount of coordination increased did not change

  2. The amount of coordination decreased significantly

  3. The amount of coordination decreased moderately

  4. Did not coordinate with our external auditor


  1. Please indicate the approximate number of employee/management hours required to conduct the management assessment of ICFR in FY 2006 and FY 2007:

  1. FY 2006 (_______________ response provided via drop down menu)

  2. FY 2007(________________response provided via drop down menu)


  1. Please indicate the change in the role of your company’s internal audit (or group with similar function) in management assessment process between FY 2006 and FY 2007

  1. The role of the internal audit department increased significantly – had primary responsibility for gathering evidence

  2. The role of the internal audit department increased moderately

  3. The role of the internal audit department did not change

  4. The role of the internal audit department decreased moderately

  5. The role of the internal audit department decreased significantly

  6. The company does not have an internal audit department


  1. If your company used the expertise of an outside consultant during the conduct of your management assessment in FY 2007, what type of consultant did you employ?

  1. CPA firm

  2. IT firm

  3. SOX-specific consultant

  4. Other

  5. Did not use an outside consultant


  1. What services did the consultant(s) provide? (more than one answer may be checked)

  1. Identification of controls to be tested for the management assessment

  2. Evaluating the effectiveness of the controls

  3. Developing disclosures related to management assessment

  4. Additional personnel hours need to conduct the management assessment

  5. Changes in IT system needed to conduct the management assessment

  6. Substitution of consultant hours for internal hours

  7. Other

  8. Did not use an outside consultant


  1. Approximately how much money in FY 2007 did the company spent on the services of an outside consultant that is related management assessment?

  1. 0-$25,000

  2. $25,001-$50,000

  3. $50,001-$100,000

  4. $100,000-$250,000

  5. Greater than $250,000

  6. The company did not use an outside consultant


  1. The following statements cover aspects management assessment that may have changed from 2006 to 2007 because of the issuance by the SEC of interpretive guidance for management in conducting its assessment of ICFR. Please indicate the extent of the change in the following:

  1. The scope of your company’s management assessment, including the number of risks subject to testing.

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

  1. The number of locations included in your company’s management assessment (ignoring changes in your company’s operations).

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

  1. The level of documentation your company maintained in support of its assessment.

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

  1. The number of controls subject to your company’s management assessment.

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

  1. The nature, timing and extent of evidence gathered as part of your assessment.

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

  1. The extent to which the company utilized “daily interaction” to support its assessment that controls were operating effectively.

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

  1. The extent to which management relied on evidence gained from self-assessments.

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

  1. The extent to which management relied on evidence gained from direct testing.

  1. Significantly reduced

  2. Moderately reduced

  3. No effect

  4. Moderately increased

  5. Significantly increased

Management Assessment (Non-Accelerated Filers)


The purpose of these questions is to determine the factors that influence management assessment of internal controls over financial reporting. Unless requested, please do not include auditor attestation of ICFR in your answer.


  1. What percentage of management and company staff time was needed to conduct the company’s FY 2007 management assessment of ICFR? (Please note that the amount of time should add to 100%.)



% of Time

Identifying risks to your company’s financial reporting


Identifying controls that address the risks identified


Documenting the controls identified that address the risk


Evaluating (including testing) the operating effectiveness of controls


Evaluating any identified deficiencies to determine if they were material weaknesses


Developing disclosures or SEC filings related to management assessment


OTHER (_______________________)



  1. Please indicate the approximate number of employee/management hours required to conduct the management assessment of ICFR in FY 2007:


  1. Does the company have an internal audit department or a similar function?

  1. If yes, for each year, please indicate how many employees are in your internal audit department:

  1. Number of employees: FY 2006

  2. Number of employees: FY 2007.

  1. The company does not have an internal audit department.


  1. Please indicate the role of your company’s internal audit (or group with similar function) in management assessment process in FY 2007

  1. Significant – had primary responsibility for gathering evidence

  1. Moderate –

  2. Minimal

  3. The company does not have an internal audit department.


  1. If your company used the expertise of an outside consultant during the conduct of your management assessment in FY 2007, what type of consultant did you employ?

  1. CPA firm

  2. IT firm

  3. SOX-specific consultant

  4. Other

  5. Did not use an outside consultant


  1. What services did the consultant(s) provide? (more than one answer may be checked)

  1. Identification of controls to be tested for the management assessment

  1. Evaluating the effectiveness of the controls

  2. Developing disclosures related to management assessment

  3. Additional personnel hours need to conduct the management assessment

  4. Changes in IT system needed to conduct the management assessment

  5. Substitution of consultant hours for internal hours

  6. Other

  7. Did not use an outside consultant


  1. Approximately how much money in FY 2007 did the company spent on the services of an outside consultant that is related to management assessment?

  1. 0-$25,000

  2. $25,001-$50,000

  3. $50,001-$100,000

  4. $100,000-$250,000

  5. Greater than $250,000

  6. The company did not use an outside consultant


  1. To what degree did the following influence the manner by which your company structured its management assessment of ICFR in FY 2007?

  1. Coordination with your external auditor

      1. Significantly i.e., attempted to maximize auditor reliance on assessment to minimize audit costs

      2. Moderately

      3. Minimally

      4. Not at all – structured management assessment to minimize internal effort

  2. The consideration of entity-level controls and how they impacted the number of controls and level of evidence needed to support the assessment

      1. Significantly

      2. Moderately

      3. Minimally

      4. Not at all

  3. Reliance on evidence gained from self-assessments

      1. Significantly

      2. Moderately

      3. Minimally

      4. Not at all

  4. Reliance on evidence gained from direct testing

      1. Significantly

      2. Moderately

      3. Minimally

      4. Not at all



Benefits of Compliance With Section 404 (All Filers)


  1. Based on the Company’s experiences under Section 404 of the Sarbanes-Oxley Act, please indicate the extent to which you agree with the following the statement:

    1. Compliance with Section 404 has had a positive impact on the company’s internal control structure.

      1. Strongly agree

      2. Agree

      3. No opinion

      4. Disagree

      5. Strongly disagree

    2. Compliance with Section 404 has increased the audit committee’s confidence in the company’s ICFR.

      1. Strongly agree

      2. Agree

      3. No opinion

      4. Disagree

      5. Strongly disagree

    3. Compliance with Section 404 has improved the quality of the company’s financial reporting.

      1. Strongly agree

      2. Agree

      3. No opinion

      4. Disagree

      5. Strongly disagree

    4. Compliance with Section 404 has increased the company’s ability to prevent and detect fraud.

      1. Strongly agree

      2. Agree

      3. No opinion

      4. Disagree

      5. Strongly disagree

    5. Compliance with Section 404 has reduced the company’s cost of capital.

      1. Strongly agree

      2. Agree

      3. No opinion

      4. Disagree

      5. Strongly disagree

    6. Other benefits of compliance not described above:

      1. _________________________________

      2. _________________________________

      3. _________________________________


  1. In your opinion, has the SEC been responsive to the concerns of public companies and smaller public companies regarding the cost of complying with the Section 404 requirements?

  1. Very responsive

  2. Somewhat responsive

  3. No opinion

  4. Not responsive


  1. Please check the boxes below regarding any prior surveys in which you have participated on the costs of Section 404 compliance:

  1. FEI

  2. CRA International

  3. Foley and Lardner

  4. Deloitte

  5. Greater Boston Chamber of Commerce

  6. Independent Community Bankers of America

  7. NASDAQ

  8. AEA

  9. KPMG

  10. The Lord & Benoit Report

  11. Other ____________________

  12. Have not participated in any prior surveys


  1. If you have additional information which you feel is relevant to any of the preceding questions, or if you have comments on what that you think the SEC can do to improve the costs of compliance associated with Section 404, please feel free to express your views below:

_______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________


  1. Would you be willing to provide contact information so that we may follow up if necessary?

  1. Name (_______________)

  2. Address (_______________)

  3. Phone number (_______________)

  4. Email address (_______________)


2


File Typeapplication/msword
File Title404 Cost / Benefit Study
AuthorJonesJo
Last Modified Bycrawleyp
File Modified2008-04-10
File Created2008-04-10

© 2024 OMB.report | Privacy Policy