Skip to main content
The state of ai impact assessment
SEC's New Enforcement Unit Exposes Control GapsBoard Committees and Governance
3 min readFor Internal Auditors

SEC's New Enforcement Unit Exposes Control Gaps

Introduction

The SEC's recent formation of a Financial Reporting and Accounting Unit within its Division of Enforcement highlights a critical shift in regulatory focus. This move underscores the necessity for your organization to strengthen internal controls and audit committee oversight to mitigate the risk of enforcement actions.

SEC's Strategic Shift

On August 5, 2026, the SEC announced the establishment of a dedicated Financial Reporting and Accounting Unit. This restructuring consolidates investigative resources and expertise into a single program focused on public company accounting, financial reporting, and auditing misconduct. David Woodcock, director of the Enforcement Division, emphasized the prioritization of financial reporting matters to ensure robust corporate accounting and disclosures. This is not a policy change but a strategic reallocation of resources to address complex, mission-critical cases.

Timeline of Developments

  • August 5, 2026: SEC announces the formation of the Financial Reporting and Accounting Unit.
  • Immediate aftermath: Consolidation of investigative staff and experts from various offices into the new program.
  • Ongoing: Continued emphasis by SEC leadership on accounting and financial reporting as enforcement priorities.

Identified Control Weaknesses

The SEC's decision reflects recurring patterns of control weaknesses observed in enforcement actions:

Revenue Recognition Controls: Companies face challenges with complex arrangements like bill-and-hold transactions and percentage-of-completion accounting. These require detailed documentation and judgment that many control frameworks fail to adequately address.

Non-GAAP Measure Governance: Companies often present adjusted EBITDA and other metrics without the same rigor applied to GAAP figures. These metrics, while influential, aren't subject to audit testing.

Disclosure Controls for Sales Practices: The SEC has pursued cases where companies failed to disclose practices that distort sales trends, such as offering discounts to channel partners to pull future sales into the current period.

Auditor Communication Protocols: Companies have faced charges for misleading auditors under Rule 13b2-2 of the Securities Exchange Act of 1934, which prohibits materially false statements to auditors.

Materiality Assessment Processes: Companies often rely solely on quantitative thresholds, contrary to SAB 99, which requires both quantitative and qualitative analysis.

Relevant Standards Overview

Rule 13b2-2 prohibits false or misleading statements to auditors, creating personal liability for executives.

SAB 99 requires a comprehensive materiality assessment, considering both quantitative and qualitative factors.

Regulation G and Item 10(e) of Regulation S-K mandate reconciliation of non-GAAP measures to GAAP measures and prohibit misleading presentations.

Generally Accepted Auditing Standards (GAAS) require auditors to ensure financial statements are free from material misstatement, with enforcement risks for failures.

Action Items for Your Organization

Document Complex Accounting Judgments: Maintain contemporaneous records of accounting decisions, especially for complex revenue recognition scenarios.

Enhance Controls for Non-GAAP Measures: Apply rigorous review processes to non-GAAP metrics, ensuring they are as robust as those for GAAP figures.

Align Sales Practices with Disclosure Obligations: Ensure that sales practices are accurately captured in disclosures to avoid misleading investors.

Implement Dual Materiality Screening: Train teams to apply both quantitative and qualitative materiality tests, using a checklist based on SAB 99's factors.

Strengthen Auditor Communication Protocols: Establish processes for legal review of auditor communications to prevent misleading statements.

Conduct Targeted Control Testing: Engage internal audit to test controls in critical areas, addressing deficiencies proactively.

The SEC's investment in this unit signals a sustained enforcement focus. Your organization should respond with a systematic upgrade of controls and documentation to safeguard against enforcement actions.

Promotional banner for the Penetration Report Template Kit

You Might Also Like