ICFR's Role in the Public Company Accountability Framework

Investor trust in U.S. capital markets has been built over decades through strong accountability, transparent financial reporting, and effective internal controls. That trust is supported by a capital markets ecosystem in which each stakeholder plays a vital role.

The SEC’s proposal, Enhancement of Emerging Growth Accommodation and Simplification of Filer Status for Reporting Companies, would expand the number of companies eligible for certain scaled reporting and compliance accommodations.

If adopted, the proposal would consolidate filer classifications into two primary categories: large accelerated filers and non-accelerated filers. The SEC’s Proposal estimates that approximately 60% of companies currently subject to internal control over financial reporting (ICFR) auditor attestation requirements under Section 404(b) would become newly exempt if the Proposal was adopted. Robust ICFR supports high quality, reliable financial reporting. The SEC also proposes a five-year period before newly public companies could be designated as large accelerated filers, regardless of their size or growth during that time.

At the Center for Audit Quality (CAQ), we support the SEC’s goal of simplifying filer status and reducing unnecessary regulatory costs. However, we believe the proposal’s exemptions from ICFR attestation requirements may be too broad and the five-year accommodation for newly public companies regardless of size is not appropriately tailored.

The framework should evolve alongside the changing business landscape, but any changes should carefully balance the goal of reducing compliance burdens with the investor protections and market safeguards that underpin confidence in U.S. capital markets.

Why ICFR Matters Within the Financial Reporting Ecosystem

The Sarbanes-Oxley Act (SOX) was signed into law over 20 years ago in response to the financial reporting scandals of the early 2000s. The legislation strengthened corporate accountability and aimed to restore investor confidence in the integrity of U.S. capital markets.

SOX created an interconnected system of checks and balances in which the responsibilities of management, audit committees, auditors, regulators, and boards reinforce one another. That ecosystem includes:

• Management certification of financial reports and internal controls;
• Audit committee oversight of external auditors;
• Independent auditor attestation of ICFR;
• Enhanced auditor independence requirements; and
• Independent oversight of public company auditing.

ICFR requires companies to establish, maintain, and evaluate effective internal controls. Auditor attestation over ICFR provides independent assurance regarding the effectiveness of a company’s internal controls and contributes additional rigor and discipline to the financial reporting process.

ICFR plays an important role in the broader system to promote confidence and informed decision-making in the capital markets. Evidence suggests that ICFR oversight contributes to more effective financial reporting controls and reinforces accountability. Expanding exemptions from ICFR auditor attestation warrants careful consideration of the potential effects on financial reporting quality, investor confidence, and transparency in the capital markets.

Why Emerging Risks Increase the Value of Independent Assurance

For companies of all sizes, ICFR remains critical in today’s reporting landscape as advanced technologies increase in scale and complexity. Public company audit partners report that technology disruptions and AI-competitive pressure are the top economic risks facing public companies in the next 12 months, and that AI governance presents the biggest challenge to audit committees.

Technology-related controls are already being identified as common areas of material weakness, and internal controls are among the primary mechanisms companies use to establish the reliability of their reporting processes and systems. As companies increasingly deploy AI and other advanced technologies in financial reporting, confidence in the controls governing those systems becomes even more important.

Public company status provides meaningful benefits, including access to capital, liquidity, and participation in deep and efficient markets, but comes with responsibilities to investors and the broader marketplace. Regulatory requirements should be appropriately tailored to company size and complexity while carefully balancing capital formation objectives, investor protection, and confidence in the capital markets.

Why a Tailored Approach Can Maintain Confidence

The CAQ believes there is an opportunity to reduce compliance costs and complexity while maintaining audit quality and investor protections. As outlined in the CAQ’s comment letter, targeted refinement could advance the SEC’s objectives while preserving important safeguards.

Our recommendations for the SEC include:

• Reinforcing the application of materiality principles;
• Clarifying implementation guidance around ICFR;
• Promoting more risk-based approaches to compliance; and
• Simplifying areas where requirements have become unnecessarily complex over time.

The SEC could also consider whether certain requirements can be better tailored based on a company’s size, market significance, and complexity. These reforms could help address legitimate concerns regarding compliance burdens while preserving important elements of the oversight structure that supports investor decision-making.

Ultimately, investor protection, public company accountability, and capital formation are not competing objectives. They are interdependent drivers of healthy and efficient capital markets. As policymakers consider the future of the public company accountability framework and filer status requirements, we support the SEC’s goal of reducing unnecessary regulatory costs and encourage the Commission to carefully consider the potential effects of the proposal on investor protection, financial reporting quality, and confidence in the capital markets.

Subscribe to the CAQ and follow us on LinkedIn for the latest public company audit profession news.