News & Tech Tips

New law puts “book income” in the crosshairs

The Financial Accounting Standards Board (FASB) could have congressional lobbyists nipping at its heels over a “book minimum tax” rule in the newly enacted Inflation Reduction Act of 2022 (IRA). This would be the first corporate alternative minimum tax based on financial statement book income since the 1980s. And many in the accounting profession are up in arms about it.

Book minimum tax provision

A company’s book income as reported on its income statement may differ significantly from its taxable income for federal income tax purposes. The IRA — a $740 billion package with provisions on health care, climate and tax — will require companies that report over $1 billion in adjusted financial statement income (AFSI) to pay a 15% minimum tax rate on that income. Some of these companies may already be satisfying this requirement. But others with over $1 billion in book income, which may have taken certain credits or deductions that lower their tax rate below 15% of their AFSI, may be subject to additional tax liability under the new law.

Unlike previous calculations of corporate alternative minimum tax that started in taxable income, the minimum tax under the IRA starts with book income. In addition to allowing for the use of net operating losses and foreign tax credits, the calculation of AFSI allows exemptions for such items as general business credits and defined pension benefits. A late modification also allows for the reduction of AFSI by accelerated depreciation under the federal tax code.

FASB mission

The FASB develops U.S. Generally Accepted Accounting Principles (GAAP) for public and private companies and not-for-profit organizations in the United States. This rulemaking body is designed to be independent from influence by corporations and Congress. However, the book minimum tax rule could potentially give the FASB significant influence over some of the revenue the federal government collects — with potentially significant financial implications for U.S. companies.

This provision is effective for tax years beginning after December 31, 2022. It applies to any corporation (other than an S corporation, regulated investment company, or a real estate investment trust) that meets an average annual AFSI test for one or more earlier tax years that end after December 31, 2021. The Joint Committee on Taxation estimates that about 150 corporate taxpayers would be subject to this tax annually. 

“Even though [the IRA] doesn’t directly involve FASB, it does have implications for FASB because it is asking major companies to pay a tax based on financial statement income which is based on GAAP standards set by FASB,” said Andrew Lautz, director of federal policy at National Taxpayers Union.

Changes made to financial accounting rules could have a direct impact on federal tax revenue. As a result, Congress may take more interest in the FASB’s work in the future and lobby for or against certain changes. Accounting standards could become targets for special interests and lobbyists. Any resulting rule changes could extend to all entities that follow GAAP, not just large corporations with more than $1 billion in AFSI.

Accounting industry pushback

“What is concerning at this point is that tying the new minimum tax to financial statement income creates incentives for companies to report lower book income, which may be at odds with the overall purpose of financial statements (and the goal of the FASB) to be a source of information that is useful to current and potential investors and creditors,” said Mary Cowx, Assistant Professor at the W. P. Carey School of Accountancy at Arizona State University.

The Financial Accounting Foundation (FAF), which governs the FASB, recently said tax and public policy matters are outside the FASB’s mission and should be left to Congress and other regulatory agencies. The FAF’s statement is consistent with a letter signed by more than 300 accounting professionals that was sent to Congress when it was considering the Build Back Better (BBB) bill. However, Congress made major changes to the book minimum tax provision from what was proposed under the BBB and what was signed into law under the IRA.

Stay tuned

It’s currently uncertain whether the new law will lead to unintended changes in GAAP. But the FAF is committed to maintaining the FASB’s independence and avoiding any adverse effects on investor confidence and capital markets. Contact us to discuss the status of current FASB projects that could affect income reporting, such as those related to bolstering income tax disclosures and disaggregating expense information on the income statement.

© 2022

Cyber risks: A critical part of your auditor’s risk assessment

As businesses and not-for-profit entities increasingly rely on technology, cyberthreats are becoming more sophisticated and aggressive. Auditors must factor these threats into their risk assessments. They can also help you draft cybersecurity disclosures and brainstorm ways to mitigate your risk of an attack.

Increasing risks

How much does a data breach cost? The average has reached an all-time high of $4.35 million, according to the newly released “Cost of a Data Breach Report 2022.” The report, published by independent research group Ponemon Institute, also found that 83% of respondents have experienced more than one data breach.

Another key finding is that the average cost of a data breach increased by roughly 13% during the pandemic. Why? One reason is the increase in remote working arrangements. Many organizations now have sensitive data stored in more places than ever before — including laptops, cloud-based storage, email, portals, mobile devices and flash drives — providing many potential areas for unauthorized access.

Ransomware attacks are also on the rise, in part due to geopolitical instability. According to the study, ransomware attacks were up 41% in 2022 compared to the previous year. These attacks cost organizations an average of $4.54 million per incident in 2022, excluding any ransom paid to the perpetrator. Ransomware attacks generally take longer to detect and contain than other types of data breaches.

Targeted data

Hackers may try to steal valuable information about your organization’s employees and customers. Examples include payment card data, protected health data and personal identifiable information, such as phone numbers, addresses and Social Security numbers.

Another target may be valuable intellectual property, such as customer lists, proprietary software, formulas, strategic business plans and financial data. These intangible assets may be sold or used by competitors to gain market share or competitive advantage.

Risk assessment

As the frequency and severity of cyberattacks have increased, data security has become a critical part of the audit risk assessment. In recent years, the Public Company Accounting Oversight Board (PCAOB) has interviewed auditors of companies that have experienced a cybersecurity breach.

These interviews reveal that audit firms provide varying levels of guidance, both when assessing risk at the start of the engagement and when uncovering a cybersecurity incident that occurred during the period under audit or during audit fieldwork. For example, auditors usually ask management what’s being done to understand, detect and prevent computer system breaches.

Another key finding of the PCAOB research is that the costs associated with cybersecurity breaches may not always be apparent. A major cybersecurity breach can cause more than lost profits; it may also result in a loss of customers, reputational damage and even bankruptcy.

We can help

Though PCAOB’s research focuses on public companies, any organization can be the victim of a cyberattack. And the effects may be even more devastating for those with fewer resources to absorb the losses and assign dedicated staff to respond to breaches. Our firm is atop the latest cybersecurity trends. Our auditors can help your organization assess its cyber risks and improve the effectiveness of internal controls over sensitive data. Contact us for more information.

© 2022

How external confirmations are used during an audit

Auditors commonly use confirmations to verify such items as cash, accounts receivable, accounts payable, employee benefit plans and pending litigation. Under U.S. Generally Accepted Auditing Standards, an external confirmation is “a direct response to the auditor from a third party either in paper form or by electronic other means, such as through the auditor’s direct access to information held by a third party.”

Some companies may be put off when auditors reach out to customers, lenders and other third parties — and sometimes confirmation recipients fail to respond in a timely, complete manner. But confirmations are an important part of the auditing process that you’ll better appreciate if you learn more about them.

Three formats

The types of confirmations your auditor uses will vary depending on your situation and the nature of your organization’s operations. Confirmations generally come in the following three formats:

1. Positive. Recipients are requested to reply directly to the auditor and make a positive statement about whether they agree or disagree with the information included.

2. Negative. Recipients are requested to reply directly to the auditor only if they disagree with the information presented on the confirmation.

3. Blank. The amount (or other information) isn’t stated on this type of request. Instead, it requests recipients to complete a blank confirmation form.

Confirmation procedures may be performed as of a date that’s on, before or after the balance sheet date. If the procedures aren’t performed as of the balance sheet date, the account balance will need to be rolled forward (or backward) to the balance sheet date.

Mailed vs. electronic forms

In the past, auditors sent out confirmation letters through the U.S. Postal Service. Then, they waited to receive written responses from their audit clients’ customers, suppliers, banks, benefits plan administrators, attorneys and others. This was a cumbersome process. If an auditor failed to receive an adequate level of response, follow-up confirmation letters could be sent, which could lead to delays in the audit process. Alternatively, the auditor could contact nonresponding recipients by phone or in person. Otherwise, the auditor would need to perform alternative procedures.

Although written confirmations are still permitted, auditors routinely use electronic confirmations today. These may be in the form of an email submitted directly to the respondent by the auditor or a request submitted through a designated third-party provider.

Electronic confirmations can be considered reliable audit evidence. Plus, they overcome some of the shortcomings of written confirmations. That is, they’re sent and received instantaneously at no cost, and the electronic confirmation process is generally secure, minimizing the risks of interception or alteration. As a result, some financial institutions no longer respond to paper confirmation requests and will respond only to electronic confirmation requests.

Let’s work together

External confirmations can be a simple and effective audit tool. Contact us if you have questions about how we plan to use confirmations during your next audit or if you have concerns about the efficacy or security of the confirmation process.

© 2022

Evaluating “going concern” concerns

Under U.S. Generally Accepted Accounting Principles (GAAP), financial statements are normally prepared based on the assumption that the company will continue normal business operations into the future. When liquidation is imminent, the liquidation basis of accounting may be used instead.

It’s up to the company’s management to decide whether there’s a so-called “going concern” issue and to provide related footnote disclosures. But auditors still must evaluate the appropriateness of management’s assessment. Here are the factors that go into a going concern assessment.

Substantial doubt and potential for mitigation

The responsibility for making a final determination about a company’s continued viability shifted from external auditors to the company’s management under Accounting Standards Update (ASU) No. 2014-15, Presentation of Financial Statements — Going Concern (Subtopic 205-40): Disclosure of Uncertainties About an Entity’s Ability to Continue as a Going Concern. The updated guidance requires management to decide whether there are conditions or events that raise substantial doubt about the company’s ability to continue as a going concern within one year after the date that the financial statements are issued (or within one year after the date that the financial statements are available to be issued, to prevent auditors from holding financial statements for several months after year end to see if the company survives).

Substantial doubt exists when relevant conditions and events, considered in the aggregate, indicate that it’s probable that the company won’t be able to meet its current obligations as they become due. Examples of adverse conditions or events that might cause management to doubt the going concern assumption include:

  • Recurring operating losses,
  • Working capital deficiencies,
  • Loan defaults,
  • Asset disposals, and
  • Loss of a key franchise, customer or supplier.

After management identifies that a going concern issue exists, it should consider whether any mitigating plans will alleviate the substantial doubt. Examples of corrective actions include plans to raise equity, borrow money, restructure debt, cut costs, or dispose of an asset or business line.

Aligning the guidance

After the FASB updated its guidance on the going concern assessment, the Auditing Standards Board (ASB) unanimously voted to issue a final going concern standard. The ASB’s Statement on Auditing Standards (SAS) No. 132, The Auditor’s Consideration of an Entity’s Ability to Continue as a Going Concern, was designed to promote consistency between the auditing standards and accounting guidance under U.S. GAAP.

The updated guidance requires auditors to obtain sufficient appropriate audit evidence regarding management’s use of the going concern basis of accounting in the preparation of the financial statements. It also addresses uncertainties auditors face when the going concern basis of accounting isn’t applied or may not be relevant.

For example, SAS No. 132 doesn’t apply to audits of single financial statements, such as balance sheets and specific elements, accounts, or items of a financial statement. Some auditors contend that the evaluation of whether there’s substantial doubt about a company’s ability to continue as a going concern can be performed only on a complete set of financial statements at an enterprise level.

Prepare for your next audit

With increased market volatility, rising inflation, supply chain disruptions, labor shortages and skyrocketing interest rates, the going concern assumption can’t be taken for granted. Management must take current and expected market conditions into account when making this call and be prepared to provide auditors with the appropriate documentation. Contact us before year end if you have concerns about your company’s going concern assessment. We can provide objective market data to help evaluate your situation.

© 2022

Last call for lease accounting

The updated lease accounting standard is currently in effect for private companies. After several postponements during the pandemic, the Financial Accounting Standards Board (FASB) voted unanimously to move forward with the changes. That means private companies and private not-for-profit entities that follow U.S. Generally Accepted Accounting Principles (GAAP) must adopt the new standard for fiscal years beginning after December 15, 2021, and interim periods within fiscal years beginning after December 15, 2022. Surprisingly, some organizations still haven’t completed the implementation process, however. (Note: The updated accounting rules for long-term leases took effect for public companies in 2019.)

In a nutshell

Under the updated guidance, organizations must report both operating and finance leases on their balance sheets (with the exception of short-term leases with terms of 12 months or less). Previously, operating leases didn’t have to be recorded on the balance sheet.

This means lessees must now record a “right-to-use” asset and a corresponding liability for lease payments over the expected term. Generally, the asset and liability are based on the present value of minimum payments expected to be made under the lease, with certain adjustments. The updated guidance also requires additional disclosures about the amount, timing and uncertainty of cash flows related to leases.

How will these changes affect your organization’s financial statements? The effects vary, but if you have significant operating leases for buildings, equipment, vehicles, technology and other assets, adopting the updated standard will immediately increase your company’s assets and liabilities, making it appear to be more leveraged than before. This can cause technical violations of loan covenants that limit your debt or require you to maintain certain debt ratios. You might want to forewarn your lenders if you expect major changes to your year-end financial results under the updated guidance.

A major undertaking

Based on our experiences with public companies and other organizations that have already implemented the updated lease standard, the biggest challenge will be to locate all of your leases and extract the data necessary. Leases generally aren’t standardized, so reviewing them and gathering the required data — including lease terms, payment schedules, end-of-term options and incentives — can be a time-consuming, manual task.

Another challenge will be identifying leasing arrangements that must be accounted for under the updated standard but aren’t found in traditional lease agreements. If an agreement gives you the right to control an identified asset for a period of time in exchange for payment, then it may be considered a lease under the updated guidance. For example, leases may be “embedded” in service, supply, transportation or information technology agreements. With embedded leases, you’ll need to separate the contract’s lease and nonlease components for reporting purposes.

Leverage external resources

Organizations with significant leasing arrangements might want to consider purchasing lease accounting software to automate the process of managing and tracking their leases and calculating their lease-related assets and liabilities. If you haven’t yet started the implementation process, we can help you evaluate software options and get your accounting records and systems up to speed. Contact us for more information.

© 2022