One billion dollars in assets is often considered a growth benchmark for community banks. When banks reach this size, they are subject to new annual reporting requirements that they didn\u2019t have to worry about when they were smaller.<\/p>\n
One of these is the requirement to obtain an assessment of the effectiveness of the bank\u2019s internal control structure and procedures. If a bank has $1 billion in consolidated total assets at the beginning of its fiscal year, it must obtain this assessment as of the end of the fiscal year, even if assets drop below this level during the year.<\/p>\n
What Must Be Included<\/strong><\/p>\n According to Part 363 of the FDIC Improvement Act of 1991, this assessment must include the following:<\/p>\n In addition, management must disclose all identified material weaknesses in internal controls that haven\u2019t been remediated before the end of the fiscal year. If one or more material weaknesses are identified, management may not conclude that ICFR is effective.<\/p>\n What Is ICFR?<\/strong><\/p>\n The Center for Audit Quality has prepared a Guide to Internal Control Over Financial Reporting. The guide includes a simple definition: the controls specifically designed to address risks related to financial reporting. In other words, these are the controls that are designed to provide reasonable assurance that a business\u2019s (or bank\u2019s) financial statements are reliable and prepared in accordance with GAAP.<\/p>\n The Committee on Sponsoring Organizations of the Treadway Commission (COSO) has produced a framework to help businesses and banks structure and evaluate internal controls that address a broad range of risks. According to the COSO framework, there are five separate components to internal controls:<\/p>\n Informed Judgments and Assumptions<\/strong><\/p>\n The Guide to Internal Control Over Financial Reporting points out that financial reporting often requires sophisticated decision-making and the use of informed judgment. For banks, this includes things like estimating allowances for loan and lease losses, valuing illiquid securities, and determining whether intangible assets are impaired.<\/p>\n Bank management must make informed judgments in these areas regarding the use of assumptions and the likelihood of future events. In these scenarios, there is often a range of acceptable outcomes\u2014not just one correct result.<\/p>\n Internal controls can\u2019t remove the need for judgment in these situations or eliminate the variations in reporting that are inherent when a range of acceptable outcomes is possible. However, controls can be designed and implemented so the process used to make accounting judgments is addressed. This helps provide reasonable assurances that financial reports are presented in accordance with GAAP.<\/p>\n How to Prepare<\/strong><\/p>\n If your bank is approaching the $1 billion threshold, you should start making preparations to meet the FDIC Improvement Act\u2019s requirement that you obtain an assessment of the effectiveness of your internal control structure and procedures. The first step is to gather all the documentation that will be necessary for your assessment.<\/p>\n Next, you should identify the most important internal controls in the areas of loans, deposits, investments, payroll, IT, etc. There may be 100 or more different controls within a community bank, so testing and documentation could be a time-consuming process.<\/p>\n It\u2019s usually a good idea to do a dry run of your internal control testing at least one year before you go live so you can address any problems or issues that arise. If control failures occur after you go live, this will be reflected in the assessment of your internal controls, which could cause issues with the examiners.<\/p>\n In-House vs. External Assessment<\/strong><\/p>\n The assessment of the effectiveness of your bank\u2019s internal control structure and procedures can theoretically be done in house. However, the reality is that few community banks of this size have the resources required to perform such an assessment effectively.<\/p>\n Instead, it usually makes sense to outsource the assessment to a CPA firm that has expertise in COSO. This will help ensure your bank meets all the requirements of the FDIC Improvement Act that are related to internal control assessment.<\/p>\n We can perform an assessment of the effectiveness of your bank\u2019s internal control structure and procedures. Give us a call to learn more.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":" One billion dollars in assets is often considered a growth benchmark for community banks. When banks reach this size, they are subject to new annual reporting requirements that they didn\u2019t have to worry about when they were smaller. One of these is the requirement to obtain an assessment of the effectiveness of the bank\u2019s internal […]<\/p>\n","protected":false},"author":9,"featured_media":6854,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[36],"tags":[],"acf":[],"yoast_head":"\n\n
\n
\n
\n