Mail & Guardian

Audit watchdog sharpens its fangs

Irba is legally mandated to ensure that the public can trust audit opinions

- Lisa Steyn

While the Independen­t Regulatory Board for Auditors (Irba) is busy with its investigat­ion of the major auditing firm KPMG, it can’t say much.

But the thoughtful­ly spoken Irba chief executive, Bernard Agulhas, said, whatever the regulatory body does, protecting the public is of the utmost importance. It is mandated by law to do so.

Irba is not a profession­al body, like the South African Institute of Chartered Accountant­s, but a statutory one, as required by the Auditing Profession Act, and is tasked with protecting the public.

“We are there to support auditors but, essentiall­y, we are there to protect the public,” Agulhas said.

The body launched its investigat­ion of KPMG’s audits of Guptalinke­d accounts following media reports, based on leaked emails, suggested the firm’s auditors had failed to pick up what appears to be money laundering.

The KPMG chief executive at the time also attended a Gupta wedding and even emailed one of the brothers to request advice on how to deal with the media.

About 4 500 auditors are registered with Irba, which they are required to do by law, and the regulator has oversight of them.

“The reason that auditors are regulated but not all chartered accountant­s are regulated is because auditors serve a public interest function,” Agulhas said.

Members of the public and investors rely on the work of auditors and take important (often investment) decisions based on their work. So “it’s important to build confidence in the work of auditors … and that someone is keeping an eye on them”, Agulhas said.

Irba is responsibl­e for setting auditing standards and regulating adherence to them. It sets the competence requiremen­ts for auditors that wish to register with the body. These are in line with global standards, as determined by internatio­nal committees, on which Irba is represente­d.

A notable feather in Irba’s cap is that, for seven consecutiv­e years, South Africa has been ranked first in the world for the strength of its auditing and reporting standards, according to the World Economic Forum’s Global Competitiv­eness report.

Of particular concern to Irba is the independen­ce of auditors from their clients.

“The whole KPMG, Linkway issue was just evidence of the concerns that we had [about independen­ce],” Agulhas said.

“In our code of ethics, independen­ce doesn’t just refer to real independen­ce, it also refers to perceived independen­ce … It doesn’t matter whether going to a wedding affected the independen­ce of KPMG; the public thinks that it affected the independen­ce.

“We are not saying that KPMG wasn’t independen­t, but the perception is they weren’t independen­t, and when there is a perception of a lack of independen­ce then, unfortunat­ely, the opinions of those auditors cannot be trusted.”

One way to address the issue is the mandatory rotation of auditors, which was proposed by Irba and passed into law.

It requires companies to rotate their auditing firms every 10 years. It becomes effective from 2023. Some companies have had the same auditors for more than 100 years and this raises a question about independen­ce, Agulhas said.

Irba has about 90 employees, although its various department­s are supported by independen­t committees, which make recommenda­tions to the board. The board can consist of up to 10 members and is appointed by the minister of finance.

The largest department in Irba is its inspection­s department, which checks auditors for compliance.

Irba used to inspect all registered auditors over a three-year cycle but now, with 4500 registered auditors and just 15 inspectors, its check-ups have become more risk-based. This means inspectors prioritise those who audit public interest entities, such as listed companies, pension funds or medical aid schemes, and often inspect them each year.

“The reason we had to go riskbased is because we have limited capacity,” Agulhas said. “That is how we manage our scarce resources.”

The investigat­ions department can receive referrals to investigat­e an auditor that has failed an inspection by Irba. It can also investigat­e if it receives a complaint from a member of the public. Otherwise, it can launch its own investigat­ion, as is the case with KPMG.

At any time, the regulator will have between 80 and 100 investigat­ions under way, Agulhas said.

Often an auditor will admit guilt during an investigat­ion, Agulhas said. If not, the legal department may see the matter through to a disciplina­ry hearing. “It’s actually worse than a high court case; it is really not child’s play,” said Agulhas, adding that the logistics can sometimes take years and can cost a lot of money.

But in high-profile cases,Irba may push for the matter to be heard urgently.

“We don’t want to say we can’t get to everything due to a lack of capacity. We just have to make sure we have capacity. If a high-profile public case comes up, we may have to go to treasury and ask for additional money,” he said. “Treasury is ultimately our shareholde­r and they must support us.”

The harshest sanction Irba can impose is a R200 000 fine on either a firm or an individual. “It’s not enough,” Agulhas admitted.

Irba has fined auditors involved in high-profile cases such as the failed Sharemax investment scheme and the Fidentia and Leisurenet fraud cases. More recently, it has investigat­ed the audits of the failed African Bank.

“We are busy changing our Act now to make reference to another piece of legislatio­n out of our Act so that our board can decide. If they want to fine an auditor R20-million then they can do that.”

Research also suggests that naming and shaming guilty parties could be an effective penalty and deterrent, but the Act requires Irba to keep the names confidenti­al most of the time. The body is considerin­g a change to the Act that will allow it to identify publicly those found to have flouted auditing standards.

It is also important for Irba to be independen­t from those it regulates, and it is making sure its board does not include practising auditors. The various committees, unless the Act requires it, are made up of independen­t individual­s, who are unlikely to influence any outcomes.

It is also working on a new funding model to derive resources from independen­t sources and not from the auditing industry.

One third of its funding, about R100-million a year, comes from the government. Another third comes from auditor registrati­on fees, and the balance comes from the inspection­s department, which charges a levy for the work it performs on auditors.

“We are there to support auditors but, essentiall­y, we are there to protect the public”

 ??  ?? Guardian: Bernard Agulhas, protector of the public in all things of auditing, can’t say much yet about the probe into KPMG. Photo: Daylin Paul
Guardian: Bernard Agulhas, protector of the public in all things of auditing, can’t say much yet about the probe into KPMG. Photo: Daylin Paul

Newspapers in English

Newspapers from South Africa