Management Override/Fraud
Browse Word (.docx) playbooks in this category.
Unsupported Manual Journal Entries
This module addresses the most common mechanism for financial-statement fraud: manual journal entries posted without documentation, authorization or legitimate business purpose. AU-C Section 240 requires auditors to test manual entries as part of management-override assessment. The module examines WorldCom's $3.8 billion and HealthSouth's $2.7 billion frauds, both executed through manual journal entries directed by senior management. Key fraud characteristics include unusual account combinations, round-dollar amounts, entries posted by senior management, weekend or holiday timing, period-end concentration and subsequent-period reversal. CFO controls include mandatory documentation, independent approval, ERP access restrictions, prohibited account combinations and unusual-timing alerts. The dialogue identifies three unsupported entries totaling $1.54 million posted on a Sunday evening (prepaid-to-SGA, deferred-revenue-to-income, inventory-to-COGS), all directed by the controller, triggering immediate reversal and investigation.
Post-Close Entries Altering Results
This module addresses journal entries posted after the accounting period has been closed that alter the financial results. Legitimate post-close entries are limited to error corrections, auditor-requested adjustments and tax- provision finalization. The red flag arises when entries adjust results to targets after operational performance is known. The module examines retail and technology enforcement patterns where controllers posted entries between the close date and the earnings release to bring EPS to consensus. Key warning signs include entries consistently in a favorable direction, absence of error documentation, entries posted between fieldwork and the audit opinion and entries that reverse in the subsequent period. The dialogue identifies seven post-close entries totaling $2.6 million posted between the October 3 close and October 15 earnings release, bringing EPS from $0.71 to exactly $0.74 consensus, none supported by identified error documentation.
Top-Side Adjustments Bypassing Controls
This module addresses consolidation-level entries posted by corporate accounting that adjust subsidiary trial balances after submission, bypassing entity-level controls. Legitimate top-side adjustments include tax provisions, corporate allocations and consolidation eliminations. The red flag arises when entries alter subsidiary operating results without subsidiary-controller awareness. The module examines enforcement patterns where corporate controllers posted millions in top-side adjustments across multiple subsidiaries without documentation, each below the individual-review threshold but material in aggregate. Key warning signs include subsidiary-controller surprise, directional consistency, period-end concentration, off-system workbooks and reversing entries. The dialogue identifies twelve top-side adjustments totaling $3.8 million across eight subsidiaries, all favorable, all below the $600,000 threshold individually, posted by the corporate controller without documentation, bringing operating income from $3.2 million below budget to $600,000 above.
Management Intimidation of Accounting Staff
This module addresses the use of executive authority to pressure accounting personnel into compromising financial-reporting integrity through subtle signals, explicit direction or retaliation. Intimidation ranges from questioning competence for recording unwanted charges to explicit threats of termination. The module examines WorldCom, HealthSouth and implicit-pressure patterns where controllers complied with improper directives because the alternative was career destruction. Under SOX Section 806, whistleblower protections exist, but the power asymmetry between management and accounting staff makes organizational culture the primary defense. Key warning signs include high accounting-staff turnover, adversarial financial-reporting dynamics, override without analysis, hotline complaints and exit-interview references to pressure. The dialogue reveals AU-C 240 staff inquiries where four of twelve describe high pressure and two say do not push back, three departures citing VP of Finance pressure, and an impairment analysis overridden by directing a lower discount rate.
Withholding Information from Auditors
This module addresses management's failure to provide the external auditor with complete, timely and transparent access to records, documents, personnel and information needed for the audit opinion. Withholding includes omitting side agreements, delaying document production, restricting access to personnel or locations, providing misleading responses and concealing related-party relationships. The management-representation letter signed under SOX Sections 302 and 906 creates personal liability for false certifications. The module examines technology and manufacturing enforcement cases where CFOs denied the existence of side agreements later discovered through customer confirmations and whistleblower complaints. The dialogue reveals a twelve-month return-right amendment on a $1.8 million Pinnacle sale discovered through customer confirmation, bearing the VP of Sales' signature despite his denial of knowledge, with the amendment absent from the contract file provided to the auditor.
Stock-Option Backdating
This module addresses the retroactive selection of stock-option grant dates corresponding to stock-price lows, producing in-the-money options represented as at-the-money grants. Under ASC 718, compensation expense is measured at the grant-date fair value. Backdating understates both the fair value and the compensation expense. The module examines the 2006-2010 SEC backdating scandal where academic research demonstrated that the probability of consistently selecting price lows was less than one in a billion, leading to enforcement actions against over 140 companies. Key detection methods include statistical grant-date analysis, document-metadata review, Form 4 filing-timeliness verification and spring-loading assessment. CFO controls include fixed grant-date calendars, same-day documentation, automatic exercise-price setting and spring-loading prohibition. The dialogue reveals nine of twelve grants over three years at 30-day lows (probability less than one in ten thousand) with retroactively created documentation and $2.8 million in cumulative expense understatement.
Insider Trading Signals in Financial Reporting
This module examines the intersection between insider trading and financial-reporting fraud. When executives manipulate financial statements and trade on the knowledge that reported results are misleading, the trading provides evidence of knowledge and scienter. Trading patterns inconsistent with reported results serve as early- warning indicators of financial-statement manipulation. The module examines Enron executive stock sales during the concealment of off-balance-sheet losses, pharmaceutical CFO tipping before a failed drug trial and technology executives adopting 10b5-1 plans with MNPI. Under SEC Rule 10b-5, trading while possessing material non-public information is unlawful. Key detection methods include pre-announcement trading analysis, 10b5-1 plan adoption- timing review, related-person trading monitoring and trading-to-outlook consistency assessment. The dialogue identifies three executives selling $1.8 million without 10b5-1 plans three weeks before a 12% revenue miss and 18% stock decline.
Failure to Investigate Whistleblower Complaints
This module addresses the company's obligation to receive, investigate and act on whistleblower complaints about financial-reporting integrity. ACFE research consistently shows tips detect more frauds than audits, internal controls and management review combined. Under SOX Section 301, the audit committee must establish procedures for confidential, anonymous complaints about accounting matters. Section 806 and Dodd-Frank Section 922 provide whistleblower protections. The module examines Enron (Sherron Watkins memo ignored), WorldCom (internal audit pursued despite resistance) and healthcare enforcement where a complaint investigated by the implicated controller was closed as unsubstantiated. Key red flags include self-investigation by implicated parties, suppressed findings, retaliation against complainants and zero complaint volume. The dialogue identifies two improperly handled complaints: an undisclosed return-rights allegation investigated by the VP of Sales whose team was the subject, and a post-close entry complaint forwarded to the implicated controller with subsequent reassignment of the complainant.