We have previously written about how, over the past few years, the SEC and other regulatory agencies have devoted substantial resources to investigations regarding allegations that public companies have inadequate internal controls and/or a system for reporting those controls. See here, here and here. That effort shows no signs of waning. As recently as March 23, 2016, the SEC announced a settlement with a multi-national company due in part to the internal controls failures at two foreign subsidiaries. On March 10, 2016, the SEC announced a settlement of claims against Magnum Hunter Resources Corporation in connection with alleged internal control failures. And, on February 17, 2016, the SEC announced a settlement of claims against a biopesticide company, Marrone Bio Innovations, based on the company having reported misstated financial results caused in part by internal control failures.[1]
Financial Reporting and Audit Task Force
Highlights From SEC Speaks 2015
Securities and Exchange Commission leadership and staff members addressed the public on February 20-21 at the annual “SEC Speaks” conference in Washington, D.C. Common themes among the numerous presentations included the Commission’s increasing use of data analytics, the Commission’s focus on gatekeepers such as accountants and attorneys, and the Commission’s still incomplete rulemakings mandated by both the Dodd-Frank Wall Street Reform and Consumer Protection Act and the Jumpstart Our Business Startups Act.
Where There’s Thunder, There’s Lightning: SEC’s Investigation of IBM’s Cloud Computing Accounting May Be a Harbinger of a New Enforcement Focus
Cloud computing may be the next shoe to drop. On the heels of Mary Jo White’s recent appointment as Chairman of the SEC and predictions that it may refocus enforcement on accounting fraud came word last week that the Commission is investigating IBM’s cloud-computing accounting. In an SEC filing, IBM defended its revenue accounting for cloud-based services, stating “[w]e are confident that the information we have provided has been consistently accurate.”
This may just be the tip of the iceberg for an industry estimated by some analysts to generate global revenues of $131 billion this year, 60% of which originate in the United States.
Cloud computing has no single definition but one basic expression would be the practice of storing and accessing information on servers accessed through the Internet. There are many cloud-computing business models, including Infrastructure as a Service (“IaaS”), in which customers access computing power, such as servers, through physical equipment owned by the provider; Platform as a Service (“PaaS”), in which customers use a provider’s computing environment—including operating systems, programming languages, and databases—to create applications remotely; and Software as a Service (“SaaS”), services that allows users to operate software remotely. Google Documents and the e-Discovery platform Relativity are just two cloud-based services that readers may be familiar with. READ MORE