Income Tax Controls: Common Flaws & How to Prevent Them
Almost two decades after the enactment of Section 404 of the Sarbanes-Oxley Act (SOX), income tax-related material weaknesses continue to be a major issue for companies. With the costly ramifications of a weakness, the obvious question is, “How does a company prevent such an occurrence?”
The simple answer is by implementing effective internal controls.
While all public companies are required to be SOX compliant, many companies have not refreshed income tax controls since initial implementation, which is a cause for concern. Several new items of guidance and alerts on internal controls have been issued by the Public Company Accounting Oversight Board, or PCAOB. This new guidance has significantly changed the standards required to be SOX compliant. With an ever-changing tax compliance landscape, optimizing internal controls that can scale with your business can help to navigate challenges, mitigate risk, and maintain compliance with SOX.
Common Reasons Tax Controls Fail to Be SOX Compliant
Income tax is often seen as a separate specialized area of a company’s financial statements. The preparation activities and control responsibility for income tax often lies outside the core accounting team with professionals who have deep technical tax knowledge, but less experience or visibility into auditing and internal controls procedures. Further, companies with strained or limited in-house tax resources may not prioritize income tax accounting and reporting until it is too late. In such an environment, setting time aside to refresh an area that isn’t seen as ‘broken’ is difficult.
Common Flaws in Income Tax Controls
When tax controls fail, it occurs in one of two key areas: Either the controls are not effectively designed, or they are not operating effectively. Income tax controls are often heavily focused on management review procedures. While management review controls can be very efficient, it is critical that they are designed, documented, and executed effectively. These are four common pitfalls in the design of tax controls:
- Missing control(s) – The income tax provision is made up of numerous calculations impacting all areas of the financial statements. Many of these calculations require significant judgement and technical knowledge. Sufficient control procedures to cover all material areas of the provision and all areas of significant judgement should be in place. However, it is unlikely that one overarching management review control can cover all the areas of an income tax provision.
- Lack of adequately defined procedures – With so many unique calculations and judgement items within the income tax provision, companies may attempt to write one vague control that doesn’t clearly identify the nature of the review procedures performed on each key component of the income tax provision. Simply stating “management reviews the calculations” doesn’t provide sufficient detail about the procedures a reviewer performs to gain comfort with the calculation.
- Undefined investigation criteria or precision – The controls don’t clearly indicate what events or characteristics (e.g., dollar amount, percentage) will trigger further investigation into items within the income tax provision. For consistency in monitoring, it’s important to clearly define what factors will cause the reviewer to explore into the cause of the outlier identified.
- Lack of supporting evidence – While effective procedures may be designed and performed, in some instances, the actual activities performed and reviewed are not captured, documented, and retained. For example, initials on a workpaper are not an indication of the actual activities that were performed or adequate evidence of management review. Controls may lack specificity on what evidence is available to support that the control was performed and reviewed by management, which includes validation of the completeness and accuracy of the information produced by entity (i.e., reports used with parameters retained, validation of spreadsheets).
Time to Refresh
If this sounds familiar, it’s probably time to take a closer look at your internal controls procedures. Improper design and execution of internal controls can result in material weaknesses, even if management review procedures are in place. Since many companies’ tax departments do not have the bandwidth to focus on the income tax provision, co-sourcing services and partnering with income tax professionals to address these issues can fix those flaws, leaving you with the proper processes and procedures in place.
Material discussed in this communication is meant to provide general information and should not be acted on without obtaining professional advice tailored to you or your company’s individual and specific needs. Any tax advice contained in this communication (including any attachments) is not intended or written to be used, and cannot be used by any person or entity, for the purpose of (i) avoiding penalties that may be imposed on any taxpayer or (ii) promoting, marketing or recommending to another party any transaction or matter addressed herein. This information is for general guidance only and is not a substitute for professional advice.
The information contained herein should not be construed as personalized investment advice. Investment in securities involves the risk of loss, and past performance is no guarantee of future results. There is no guarantee that the views and opinions expressed in this document will come to pass. Historical performance results for investment indexes and/or categories generally do not reflect the deduction of transaction and/or custodial charges or the deduction of an investment-management fee, the incurrence of which would have the effect of decreasing historical performance results. There can be no assurances that your portfolio will match or outperform any particular benchmark.
Information presented was obtained from sources deemed qualified and reliable; however, MFA makes no representations as to accuracy, completeness, suitability, or validity of any information within this communication and will not be liable for any errors, omissions, or delays in this information or any losses, injuries, or damages arising from its display or use. Any forward-looking statements are believed to be reasonable; however, MFA gives no assurance that such expectations will prove to be correct.