PATRIOT Act Poses Risk for U.S. Financial Institutions

New York - Complying with the PATRIOT Act is a top concern for boards of financial services firms, according to a survey of 210 board members conducted by PricewaterhouseCoopers at its 2005 Financial Services Audit Committee Forum, held last week in New York. Sixty-five percent of those surveyed were audit committee members or chairs, who serve a crucial governance role in corporate oversight of compliance in today's post-Sarbanes-Oxley world.The PATRIOT Act, passed after the 9/11 terrorist attacks, requires financial services companies to enhance customer identification capabilities, monitoring systems, and suspicious activity reporting (SAR). The expanded obligations required by the Act, increasing scrutiny by regulators, stiff penalties paid by many institutions for non-compliance, and the increase in Suspicious Activity Report (SAR) filings, has made audit committee members particularly concerned about how their organizations manage compliance with the law.

When asked to rank their four top areas of concern from a range of challenges faced by boards of financial services institutions, the PATRIOT Act ranked higher than (in order of importance):

The disclosure of financial measures other than those prescribed by Generally Accepted Accounting Principles (GAAP). The reporting of non-GAAP measures adds a level of detail increasingly desired by investors, but raises concern among regulators over lack of uniform standards and potential for misleading information.

· The impact of a major U.S. housing bubble burst on their organizations and the economy.

* Risks associated with off-shoring critical functions. Such risks might include remote compliance with regulations, the protection of intellectual property and related reputational risks.

· Confidentiality of customer information.

Other findings of PricewaterhouseCoopers survey include:

· Board members said they continue to experience difficulty monitoring and assessing problem areas. The top four areas of concern in order of importance are: shareholder disclosure, sales practices, service provider oversight and revenue sharing.

· Almost half of board members surveyed said their compensation was not adequate given today's environment of increased regulatory scrutiny, with 29% saying their compensation does not adequately address the increased responsibilities they face as a board member. Eighteen percent said their compensation does not adequately address the time they spend on board-related matters. Sixteen percent said their compensation does not adequately address their increased risks and responsibilities. Only 35% of those surveyed said their compensation was sufficient

· When asked about the adequacy of their organization's insurance for company directors, one-quarter of those surveyed said they were examining their company's coverage if it were to face a major shareholder lawsuit. One-half feel their organizations have enough insurance in place, but 17% said they don't think their policies are sufficient to cover a large shareholder lawsuit. Nine percent said they are concerned about not having enough insurance in place to protect board members from being personally liable.

· Nearly two-thirds (65%) of board members indicated that they are spending less time on strategic business issues because of increased compliance demands required in the first year of Sarbanes-Oxley implementation. However, they also indicated they believe the Sarbanes-Oxley provisions have improved the effectiveness of the audit committee, giving them appropriate authority that once may have been resisted by management. Fully 83% of board members surveyed said they were now asking more questions of management during board meetings post- Sarbanes-Oxley.

· Board members said that both the direct costs of Sarbanes-Oxley compliance and associated lost opportunity costs to their organizations were significant in the first year. When surveyed about direct costs in year two compared to year one, nearly 37% expect costs to remain about the same, plus or minus 10%. Thirty-one percent expect a decrease in costs by 10% to 25% and 17% of board members expect a decrease of more than 25%. Fifteen percent of those surveyed expect an increase in costs of greater than 10%.

· When asked about benefit of new compliance rules to shareholders, only one out of 10 board members said the costs are justified. But, as one board member in attendance put it, "The cost of implementation was relatively cheap compared to the potential loss of confidence in our capital markets system, which ultimately is the biggest risk we all face and potentially the greatest cost of all."

Forum participants characterized the past two years as an intensive period of bringing their organizations into compliance with increased regulations, particularly Section 404 of Sarbanes-Oxley. While much of the work was done in year one, the real challenge, they said, will be sustaining a compliance culture and embedding Section 404 compliance into every layer of their organizations.

Source: PricewaterhouseCoopers

For reprint and licensing requests for this article, click here.
Security risk Core systems Compliance Data security
MORE FROM DIGITAL INSURANCE