The Public Company Accounting Oversight Board (PCAOB) has announced seven settled disciplinary orders sanctioning firms and individuals from KPMG’s global network for violations of professional auditing standards, quality control standards, and PCAOB rules, totaling $7.7 million (£6.3m) in penalties.
In addition to fines, today’s sanctions include barring or suspending four auditors from participating in public company audits and requiring three KPMG member firms to review and improve as necessary their quality control policies and procedures. One of the sanctioned firms, KPMG S.A.S. (KPMG Colombia), admitted that it failed to cooperate with a PCAOB inspection. The firm also agreed to retain an independent consultant to recommend improvements in the firm’s quality controls with respect to internal training.
PCAOB chair, Erica Y. Williams, said: “These actions should send the message to KPMG and all other registered firms that the PCAOB is committed to rooting out misconduct wherever it occurs and will employ all sanctions at its disposal to protect investors and improve audit quality.”
PCAOB acting director of enforcement and investigations, Mark A. Adler, further commented: “The breadth of the misconduct uncovered in these matters and the aggregate size of the sanctions imposed demonstrate the global reach of the PCAOB’s oversight and the Board’s heightened vigilance in enforcement. I commend my Division of Enforcement and Investigations colleagues for their dedication in pursuing these significant cases and their commitment to protecting investors.”
- Firm: $4 Million Penalty
- Individual: $25,000 Penalty
In the KPMG Colombia matter, the PCAOB sanctioned the firm and three of its associated persons – José Daniel Meléndez Giménez (“Meléndez”), Edgar Mauricio Ramírez Rueda (“Ramírez”), and Marco Alexander Rodríguez Ramírez (“Rodríguez”) – for violating PCAOB rules and standards in connection with the PCAOB’s 2016 inspection of the firm. The PCAOB also charged the firm with violating quality control standards relating to audit documentation and the firm’s internal training program.
The PCAOB found that, in 2016, the firm and various individuals improperly altered audit documentation for two audits in anticipation of a PCAOB inspection, and provided that altered documentation to PCAOB inspectors. Meléndez, the engagement partner for one of those audits, directed the improper alterations for that audit, and Ramírez and Rodríguez participated in the misconduct. The noncooperation resulted in part from deficiencies in KPMG Colombia’s system of quality control, which failed to provide reasonable assurance that (1) audit documentation was protected against improper alteration and (2) appropriate control was maintained over administrative passwords that could be, and were, used to backdate changes to work papers.
The PCAOB also found that from at least 2016 to 2020, KPMG Colombia violated PCAOB quality control standards related to integrity and personnel management. Those quality control failures prevented the firm from identifying extensive, improper answer-sharing among firm personnel in connection with tests on internal training exams covering topics that were relevant to compliance with PCAOB rules and standards.
KPMG Colombia will pay a $4 million (£3.2m) civil money penalty and will also be required to undertake certain remedial actions concerning its system of quality control. In addition, the firm was censured and will be required to complete a further investigation under the supervision of an independent consultant to determine the extent of exam cheating among the firm’s personnel and to recommend appropriate remedial actions. Meléndez, Ramírez, and Rodríguez have agreed to settlements that bar them from being associated with a registered public accounting firm. They will have the right to file a petition for Board consent to reassociate with a registered firm, after three years (Meléndez), two years (Ramírez), and one year (Rodríguez), respectively. Meléndez will additionally pay a $25,000 (£20k) civil money penalty, a reduced amount following consideration of his financial resources. Ramírez and Rodríguez would have paid penalties, but the penalties were waived after consideration of their financial resources. The firm, Meléndez, Ramírez, and Rodríguez admitted their violations involving the failure to cooperate with the PCAOB’s 2016 inspection and the improper alteration of documents.
PCAOB enforcement staff members Ramón L. Torres, Joshua M. Cutler, Michael Plotnick, Tima Hawes, and Kristina Shin conducted the investigation.
KPMG UK: Two Disciplinary Orders Imposing $2.6 Million in Penalties
The PCAOB issued two disciplinary orders against KPMG LLP (“KPMG UK”).
In one order, the PCAOB sanctioned KPMG UK for violating PCAOB quality control standards related to integrity and personnel management. Similar to KPMG Colombia, KPMG UK failed to detect or prevent extensive, improper answer sharing on tests for mandatory internal training courses. From 2018 until March 2021, hundreds of individuals from KPMG UK and KPMG Resource Centre Private Limited, an India-based entity that provides support for KPMG UK’s issuer audit work, engaged in improper answer sharing. The improper answer sharing occurred in connection with tests for training courses covering topics that included auditing, accounting, and professional independence. All of the professionals implicated in the answer sharing performed work for KPMG UK’s Assurance practice.
Without admitting or denying the findings in the order concerning the improper answer sharing, KPMG UK was censured and agreed to pay a $2 million (£1.6m) civil money penalty and to review and improve as necessary its quality control policies and procedures to provide reasonable assurance that its personnel act with integrity in connection with internal training.
In a second order, the PCAOB sanctioned KPMG UK for failing to reasonably supervise an unregistered audit firm in four consecutive audits of a public company client. In particular, KPMG UK allowed the unregistered Romanian audit firm KPMG Audit SRL to play a substantial role in four consecutive audits in which KPMG Audit SRL incurred as many as 74% of the total audit hours. Compounding the failure, in three of the four audits, KPMG UK erroneously reported that PCAOB-registered firm KPMG Romania SRL, not KPMG Audit SRL, had participated in the audits.
Additionally, KPMG UK was found to have violated, in connection with the same four audits, PCAOB standards relating to due professional care, audit planning, audit committee communications, and quality control. The Board also found that the firm had made several inaccurate filings on PCAOB Form AP regarding other audit clients, disclosing that registered KPMG affiliates had participated in various audits, when in fact separate, unregistered firms had done the work. The firm has since corrected the Form APs at issue and agreed to review and improve its quality control policies and procedures as necessary.
Without admitting or denying the findings in the second order, KPMG UK consented to the PCAOB’s order and the disciplinary action. The PCAOB imposed a $600,000 (£492k) civil money penalty, censure, and quality control undertakings.
PCAOB enforcement staff members Thomas McCann, David Florenzo, and Thomas Barry conducted the investigation concerning improper exam answer sharing. Enforcement staff members Noah A. Berlin, Rebecca J. Mealey, Judy Fish, and Tima Hawes conducted the investigation concerning KPMG UK’s failure to supervise the unregistered Romanian affiliate.
- Firm: $1 Million Penalty
- Individuals: $75,000 Penalty
The PCAOB also sanctioned KPMG Assurance and Consulting Services LLP (“KPMG India”) and KPMG India engagement partner Sagar Pravin Lakhani (“Lakhani”). The sanctions are based on KPMG India’s quality control failures and Lakhani’s supervisory and documentation failures in connection with a practice of signing off on blank placeholder work papers during the 2017 audit of a public company.
The PCAOB found that, in the course of that audit, Lakhani and other members of the KPMG India engagement team signed off on dozens of blank work papers. The blank work papers were replaced with completed work papers, in many cases after the issuance of the audit report, but the sign off dates were not updated. As a result of this practice, the work papers did not appropriately reflect the dates on which the audit work was actually completed and reviewed. KPMG India was aware that its audit software allowed personnel to modify or update audit documentation without modifying the sign off date.
By signing off on blank work papers and failing to appropriately supervise engagement team members who he knew were doing the same, Lakhani violated PCAOB documentation and supervision standards and failed to act with due professional care. In addition, KPMG India violated PCAOB quality control standards because its policies and procedures failed to provide adequate assurance that its personnel would document audit work in compliance with PCAOB standards.
The PCAOB imposed a $1 million (£820k) civil money penalty on KPMG India, censured the firm, and ordered the firm to review and improve as necessary its quality control policies and procedures. The PCAOB also imposed a $75,000 (£61k) civil money penalty on Lakhani, censured him, and suspended him from associating with a registered public accounting firm for one year.
PCAOB staff members Arnold Ramos, Samuel C. McCoubrey, and Tiffany Johnson conducted the investigation. William Ryan and John Abell supervised the four investigations described above.
For more on KPMG