CFOs’ and public accountants’ perceptions of material weaknesses in internal control areas as required by Section 404 of the Sarbanes-Oxley act

One of the most controversial aspects of the Sarbanes-Oxley Act of 2002 (SOA) is related to Section 404, which requires management to assess the entity’s internal controls, and then its independent auditor to attest and report on management’s assessment. The auditing standard governing this requirement was promulgated by the Public Company Accounting Oversight Board (PCAOB). Its title is Auditing Standard (AS) No. 2, An Audit of Internal Control Over Financial Reporting Performed in Conjunction with an Audit of Financial Statements [Public Company Accounting Oversight Board (PCAOB) (2004). An audit of internal control over financial reporting performed in conjunction with an audit of financial statements. Auditing Standard No. 2, Washington, DC: PCAOB]. AS No. 2 requires, among other things, that management must disclose any “material weaknesses” in internal controls. However, absent any guidance other than definitions from the PCAOB, management and independent auditors are left to their own judgment to define and recognize “material weakness in internal control” or “significant deficiency” while implementing AS No. 2. The research question, then, becomes to what extent, if any, are weaknesses in internal control over financial reporting consistently assessed, recognized and agreed upon by both parties? Or does their professional judgment and point of view cause different perceptions? Most of the Section 404 research has focused on the characteristics of the material weaknesses disclosed (and the capital market or other impacts of reported material weaknesses). This study, in contrast, is behavioral in context, and examines the perceptions of CFOs and CPAs as to whether they believe an internal control material weakness exists under four independent scenarios. The results indicate that the CPAs were significantly more conservative in their assessments in two of the four cases.