Category: Corporate Governance

PCAOB spotlight on auditor independence outlines considerations for audit committees

The PCAOB has released a new Spotlight on auditor independence, which provides observations from PCAOB inspections regarding independence issues and identifies considerations for both auditors and audit committees.   Auditor independence has, for years, been a major focus of the SEC’s Office of the Chief Accountant, and current Chief Accountant Paul Munter has addressed the issue in a number of statements, characterizing auditor independence as a concept that is “foundational to the credibility of the financial statements.” (See, for example, this PubCo post and this PubCo post.)  But auditor independence is not just an issue for auditors.  It’s important for companies to keep in mind that violations of the auditor independence rules can have serious consequences not only for the audit firm, but also for the company as the audit client. For example, an independence violation may cause the auditor to withdraw the firm’s audit report, requiring the audit client to have a re-audit by another audit firm. What’s more, auditor independence violations can sometimes even result in charges against the company; for example, Lordstown Motors was charged with several Exchange Act violations in connection with misrepresentations and failures to include financial statements audited by independent auditors required in current and periodic reports. Munter has long recognized that the responsibility to monitor independence is a shared one: “[w]hile sourcing a high quality independent auditor is a key responsibility of the audit committee, compliance with auditor independence rules is a shared responsibility of the issuer, its audit committee, and the auditor.”  As a result, in most cases, inquiry into the topic of auditor independence should certainly be a recurring menu item on the audit committee’s plate.  Fortunately, the Spotlight offers advice, not only for auditors, but fortunately, also for audit committee members.

California legislature tinkers with climate disclosure laws

In 2023, when California Governor Gavin Newsom signed into law two bills related to climate disclosure—Senate Bill 253, the Climate Corporate Data Accountability Act, and SB 261, Greenhouse gases: climate-related financial risk—he questioned whether the implementation deadlines in the bills were actually feasible. (See this PubCo post.) So even as the bills were being signed, it looked like they might be in for an overhaul at some point—sooner rather than later.  In July this year, Newsom proposed, along with several other changes, a delay in the compliance dates for each bill until 2028. (See this PubCo post.) However, one of the bills’ key sponsors opposed the administration’s proposal, telling Politico that the proposal didn’t reflect an agreement with lawmakers: the “administration really wants additional delays for the disclosures. And we don’t agree on that.” Apparently, Newsom’s proposal did not go anywhere. Then, at the end of August, the California Legislature passed a bill, SB 219, introduced by two sponsors of SB 253 and SB 261, that seeks to meet the Governor part way. But many may view it as pretty weak tea: while the bill gives the California Air Resources Board, which was charged with writing new implementing regulations, a six-month reprieve in the due date, for reporting entities, there is no compliance delay in commencement of reporting—it’s a big goose egg. Newsom has until the end of September to veto or sign the bill; if he does neither, the bill will become law.

Center for Audit Quality comes to the rescue for audit committees tasked with AI oversight

In this 2023 article in Fortune, a survey of 2,800 managers and executives conducted by management consulting firm Aon showed that business leaders “weren’t very concerned about AI….Not only is AI not the top risk that they cited for their companies, it didn’t even make the top 20.  AI ranked as the 49th biggest threat for businesses.” Has “the threat of AI been overhyped,” Aon asked, or could it be that the “survey participants might be getting it wrong”? If they were, it wasn’t for long. Fast forward less than a year, and another Fortune article, citing a report from research firm Arize AI, revealed that 281 of the Fortune 500 companies cited AI as a risk, representing “56.2% of the companies and a 473.5% increase from the prior year, when just 49 companies flagged AI risks. ‘If annual reports of the Fortune 500 make one thing clear, it’s that the impact of generative AI is being felt across a wide array of industries—even those not yet embracing the technology,’ the report said.”  This widespread recognition of the potential risks of genAI will likely compel companies to focus their attention on risk oversight, and that will almost certainly entail oversight by the audit committee.  To assist audit committees in that process, the Center for Audit Quality has released a new resource—an excellent new report, Audit Committee Oversight in the Age of Generative AI.

What were the major trends of the 2024 proxy season on ESG shareholder proposals?

This article from Morningstar published on the Harvard Law School Forum on Corporate Governance examines three major trends of the 2024 proxy season regarding environmental, social and governance shareholder proposals.  The author, the Director of Investment Stewardship Research at Morningstar, reports that, while the number of ESG-related proposals increased, there was a “twist in the tale”:  the increase primarily reflected a jump in anti-ESG proposals. Although support for ESG proposals on the whole was relatively flat at 23%, Morningstar found a “rebound in support for governance-focused proposals,” offsetting a decline in support for E&S proposals.

SEC approves Nasdaq corporate governance rule changes

In May, Nasdaq  proposed to revise some of its corporate governance rules—specifically Rules 5605, 5615 and 5810—to modify the phase-in schedules for the independent director and committee requirements in connection with a slew of different circumstances: IPOs, spin-offs and carve-outs, companies emerging from bankruptcy, companies ceasing to qualify as Foreign Private Issuers, companies ceasing to be controlled companies, companies transferring from other national securities exchanges, and companies listing securities that were, immediately prior to listing, registered pursuant to Section 12(g) of the Act. In addition, Nasdaq proposed to codify or amend its practices regarding the applicability of certain cure periods. Many of the changes proposed by Nasdaq were similar to rules that had previously been approved for the NYSE. There were apparently no comments received on the proposal, even after the SEC designated a longer time period for approval.  On Monday,  the SEC approved Nasdaq’s proposal.

What’s the impact of political spending from corporate treasuries?

This new report, Corporate Underwriters: Where the Rubber Hits the Road, from the nonpartisan Center for Political Accountability, examines “the scope of corporate political spending and its impact on state and national politics and policy” by taking a deeper dive into six highly influential “527” organizations.  Who supports them and what is their impact?  In particular, what is their impact on a state level—now viewed by many as a new “seat of power” for a number of key issues of the day, from reproductive healthcare rights to voting rights to the rules surrounding vote tabulation and certification of elections. According to the report, since 2010, more than $1 billion has been donated from the corporate treasuries of major U.S. companies and their trade associations to these six 527s, characterized in the report as “powerful but often overlooked political organizations that have funded the elections of state government officials across the country. These elections have reshaped policy and politics and, more fundamentally, have had a major impact on our democracy.” The CPA’s vice president of research told Bloomberg that “corporate funding of down-ballot races typically gets significantly less attention than contributions to federal candidates but…that’s changing. State attorneys general, ‘are increasingly more partisan in the way they wield their power on a national stage.’ That can create ‘riskier associations’ for companies that back such organizations.”  The report concludes that corporate treasuries are “influential funder[s] of these elections and the dominant source of money for several of these committees. It examines the impact of corporate spending on some of the most controversial issues in the country. This spending poses serious risks to companies’ reputations, their profitability, and to the environment companies need to succeed.” Would adopting a code of political spending help? According to a recent survey, shareholders seem to think so.

New Cooley Alert: ISS Opens Survey for 2025 Policy Changes; Glass Lewis Seeks Informal Feedback

It’s that time again—ISS and Glass Lewis have launched their annual policy surveys, where they seek your feedback on some of their policies. That makes it just right time to get the scoop from this helpful new Cooley Alert, ISS Opens Survey for 2025 Policy Changes; Glass Lewis Seeks Informal Feedback, from our Compensation and Benefits and Public Companies groups. As discussed in the Alert, both surveys address executive comp issues; separately, ISS “focuses more on shareholder proposal-related policies,” and Glass Lewis asks “numerous questions regarding board oversight and performance, including director accountability.”  The Alert suggests that the 2025 amendments “may be relatively low impact,” consistent with the “relatively minor policy amendments from ISS and Glass Lewis in 2024.” Be sure to check out the new Alert!

Delaware Supreme Court considers advance notice bylaws

In this recent case, Kellner v. AIM ImmunoTech, the Delaware Supreme Court articulated a two-part framework for judicial consideration of advance notice bylaws in the event of a challenge to their adoption, amendment or enforcement. If the bylaws are contested, they must be “twice-tested—first for legal authorization, and second by equity”: first, a court must evaluate “whether the advance notice bylaws are valid as consistent with the certificate of incorporation, not prohibited by law, and address a proper subject matter”; second, a court must evaluate “whether the board’s adoption, amendment, or application of the advance notice bylaws were equitable under the circumstances of the case.” Also, it’s a good idea to make the bylaws “intelligible.”  In this case, the Court held that “(1) one ‘unintelligible’ bylaw is invalid; (2) the remaining amended advance notice bylaws subject to this appeal are valid because they are consistent with the certificate of incorporation, not prohibited by law, and address a proper subject matter; and (3) the AIM board acted inequitably when it adopted the amended bylaws for the primary purpose of interfering with, and ultimately rejecting, Kellner’s nominations.  Thus, the remaining bylaws challenged on appeal are unenforceable.” Nevertheless, Kellner’s deceptive conduct meant that his nominations notice would not stand.

Cooley Alert: Federal Court Dismisses Bulk of SEC’s Complaint Against SolarWinds in Cyberattack Case

The 2020 SolarWinds hack was perhaps one of the worst cyberattacks in history, reportedly directed by the Russian intelligence service and affecting 18,000 customers, including some very well-known companies and about a dozen government agencies including the Treasury, Justice and Energy departments. Following the cyberattack, the SEC filed a complaint against SolarWinds and its Chief Information Security Officer, charging securities “fraud and  internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.”  (See this PubCo post.) SolarWinds and Brown then moved to dismiss the complaint for failure to state a claim.  On July 18, 2024, a federal district court issued a 107-page opinion, dismissing most of the SEC’s case against SolarWinds and its CISO.

New Cooley Alert: SEC Reporting Implications for Publicly Traded Companies Impacted by CrowdStrike Defective Software Update

As you know, the recent CrowdStrike defective software update caused massive and, in some cases, systemic failures to computers and networks of CrowdStrike’s customers running certain Microsoft operating systems. If your company was affected by the CrowdStrike server-related outages, you will certainly want to review this new Cooley Alert, SEC Reporting Implications for Publicly Traded Companies Impacted by CrowdStrike Defective Software Update from our Cyber/Data/Privacy and our Public Companies Groups.