2020 Inspection RSM Us LLP: (Headquartered in Chicago, Illinois)
2020 Inspection RSM Us LLP: (Headquartered in Chicago, Illinois)
2020 Inspection RSM Us LLP: (Headquartered in Chicago, Illinois)
RSM US LLP
(Headquartered in Chicago, Illinois)
yy Part I.A of the report, which discusses deficiencies (“Part I.A deficiencies”) in certain issuer audits
that were of such significance that we believe the firm, at the time it issued its audit report(s), had
not obtained sufficient appropriate audit evidence to support its opinion on the issuer’s financial
statements and/or internal control over financial reporting (ICFR); and
yy Part I.B of the report, which discusses deficiencies that do not relate directly to the sufficiency or
appropriateness of evidence the firm obtained to support its opinion(s) but nevertheless relate to
instances of non-compliance with PCAOB standards or rules.
If we include a deficiency in this report — other than those deficiencies for audits with incorrect opinions
on the financial statements and/or ICFR — it does not necessarily mean that the issuer’s financial
statements are materially misstated or that undisclosed material weaknesses in ICFR exist. If we include
a deficiency in Part I.A or Part I.B of this report, it does not necessarily mean that the firm has not
addressed the deficiency.
7 2020 8 2020
2 4
3
5
An additional deficiency identified during the 2020 inspection that does not relate directly to the
sufficiency or appropriateness of evidence the firm obtained to support its opinion(s), which appears in
Part I.B, related to audit committee communications.
We selected for review 15 audits of issuers with fiscal years generally ending in 2019. For each issuer audit
selected, we reviewed a portion of the audit. We also evaluated elements of the firm’s system of quality
control.
yy Overview of the 2020 Inspection and Historical Data by Inspection Year: Information on our
inspection, historical data, and common deficiencies.
oo Part I.A: Deficiencies that were of such significance that we believe the firm, at the time it issued its
audit report(s), had not obtained sufficient appropriate audit evidence to support its opinion(s) on
the issuer’s financial statements and/or ICFR.
oo Part I.B: Deficiencies that do not relate directly to the sufficiency or appropriateness of evidence the
firm obtained to support its opinion(s) but nevertheless relate to instances of non-compliance with
PCAOB standards or rules.
yy Part II – Observations Related to Quality Control: Criticisms of, or potential defects in, the firm’s
system of quality control. Section 104(g)(2) of the Sarbanes-Oxley Act (“Act”) restricts us from publicly
disclosing Part II deficiencies unless the firm does not address the criticisms or potential defects to the
Board’s satisfaction no later than 12 months after the issuance of this report.
yy Appendix A – Firm’s Response to the Draft Inspection Report: The firm’s response to a draft of this
report, excluding any portion granted confidential treatment.
When we review an audit, we do not review every aspect of the audit. Rather, we generally focus our
attention on audit areas we believe to be of greater complexity, areas of greater significance or with a
heightened risk of material misstatement to the issuer’s financial statements, and areas of recurring
deficiencies. We may also select some audit areas for review in a manner designed to incorporate
unpredictability.
Our selection of audits for review does not constitute a representative sample of the firm’s total population
of issuer audits. Additionally, our inspection findings are specific to the particular portions of the issuer
audits reviewed. They are not an assessment of all of the firm’s audit work nor of all of the audit procedures
performed for the audits reviewed.
View the details on the scope of our inspections and our inspections procedures.
Selection method
Risk-based selections 13 13 17
Random selections 2 2 0
Principal auditor
Audit type
3
5
Audits without Part I.A deficiencies Audits with Part I.A deficiencies
If we include a deficiency in Part I.A of our report, it does not necessarily mean that the firm has not
addressed the deficiency. In many cases, the firm has performed remedial actions after the issue was
identified. Depending on the circumstances, remedial actions may include performing additional audit
procedures, informing management of the issuer of the need for changes to the financial statements or
reporting1on ICFR, or taking steps to prevent reliance on prior audit reports.
1
Our inspection normally includes a review, on1 a sample basis, of the adequacy of a firm’s remedial
actions, either with respect to previously identified deficiencies or deficiencies identified during the
2020 If a firm does not take appropriate
current inspection. 2019actions to address deficiencies, we2018
may criticize its
2
system of quality control 4
or pursue a disciplinary action.
2
If we include a deficiency in our report — other than those deficiencies for audits with incorrect opinions
4
on the financial statements and/or ICFR — it does not necessarily mean that the issuer’s financial
statements are materially misstated or that undisclosed material weaknesses in ICFR exist. It is often not
possible for us to reach a conclusion on those points based on our inspection procedures and related
findings because, for example, we have only the information that the auditor retained and the issuer’s
Deficiencies in both financial Deficiencies in the financial Deficiencies in the ICFR
public disclosures.
statement We doICFR
and not audits
have direct access to theaudit
statement issuer’s
only management, underlying
audit only books and
records, and other information.
1
1
1
Allowance for loan losses: The deficiencies in 2020 related to substantive testing of, and testing controls
over, the valuation of the allowance for loan losses. The deficiencies in 2019 and 2018 primarily related
to testing controls over the valuation of the allowance for loan losses and the resulting overreliance on
controls when performing substantive testing.
Business combinations: The deficiencies in 2018 related to substantive testing of, and testing controls
over, the inputs and assumptions that the issuer used to value the acquired assets.
4 2
2
3 2 2
0 1 1 1 1 1 1
rvi n
ns
are
als
te
ls
no on
ion er
ap r
d
St me
l
erg
Se atio
s
les
ria
ia
ifie
y
ta
ret sum
ce
Pla
ar
ch ati
tri
log
hC
nc
Es
te
u
En
nt
us
ic
Te orm
ns
a
fit
Ma
alt
Di Con
un
al
Fin
ide
Ind
Co
ne
Re
He
Inf
m
Un
sc
Be
m
Co
2019
8
6 2
4
2 5
3 2
0 1 1 1
rvi n
ns
are
ls
als
no on
ls
e
ion er
ap r
d
St me
erg
Se atio
s
tat
y
les
ria
cia
ifie
y
ret sum
ce
Pla
ar
ch ati
tri
log
hC
Es
te
u
an
En
nt
us
ic
Te orm
ns
fit
Ma
alt
Di Con
un
al
Fin
ide
Ind
Co
ne
Re
He
Inf
m
Un
sc
Be
m
Co
2018
8
6 2
4
2 5
3
2 2
0 1 1 1
rvi n
s
re
no on
ls
e
s
als
ion er
ap r
d
St me
lan
ial
erg
Se atio
s
tat
y
les
ria
ifie
y
Ca
ret sum
ce
ar
ch ati
tri
log
c
Es
te
P
an
En
nt
us
ic
Te orm
h
ns
fit
Ma
alt
Di Con
un
al
Fin
ide
Ind
Co
ne
Re
He
Inf
m
Un
sc
Be
m
Co
Audits without Part I.A deficiencies Audits with Part I.A deficiencies
2019
7
6
5
1
4
1
3
1 5
2 4
1 2
0 1
Less than $100 million $100 – $500 million Greater than Greater than $1 billion
$500 million – $1 billion
2018
9
8
7
6
3
5
4
3
5
2 4 2
1 2
0
1
Less than $100 million $100 – $500 million Greater than Greater than $1 billion
$500 million – $1 billion
Audits without Part I.A deficiencies Audits with Part I.A deficiencies
The sole purpose of this classification system is to group and present issuer audits by the number of Part
I.A deficiencies we identified within the audit as well as to highlight audits with an incorrect opinion on
the financial statements and/or ICFR.
4
Audits with multiple deficiencies 3
5
2020
2019
3
2018
Audits with a single deficiency
8
Audits without Part I.A deficiencies 12
12
0 5 10 15
Part I.B discusses deficiencies that do not relate directly to the sufficiency or appropriateness of evidence
the firm obtained to support its opinion(s) but nevertheless relate to instances of non-compliance with
PCAOB standards or rules.
Consistent with the Act, it is the Board’s assessment that nothing in Part I of this report deals with a
criticism of, or potential defect, in the firm’s quality control system. We discuss any such criticisms or
potential defects in Part II. Further, you should not infer from any Part I deficiency, or combination of
deficiencies, that we identified a quality control finding in Part II.
We identify each issuer by a letter (e.g., Issuer A). Each deficiency could relate to several auditing
standards, but we reference the PCAOB standard(s) that most directly relates to the requirement with
which the firm did not comply.
We present issuer audits below within their respective deficiency classifications (as discussed previously).
Within the classifications, we generally present the audits based on our assessment as to the relative
significance of the identified deficiencies taking into account the significance of the financial statement
accounts and/or disclosures affected, and/or the nature or extent of the deficiencies.
The issuer used various information-technology (IT) systems to initiate, process, and record transactions
related to revenue for one business unit. The firm tested IT general controls (ITGCs) for these IT systems.
The following deficiencies were identified:
yy The firm identified a deficiency in ITGCs related to an individual’s inappropriate administrative rights
over user access to these systems but did not evaluate the severity of this control deficiency. (AS
2201.62)
The issuer used multiple service organizations to host and/or maintain and manage IT systems that the
issuer used to initiate, process, and record transactions related to certain revenue for another business
unit. The following deficiencies were identified:
yy The firm identified a control deficiency related to the issuer’s evaluation of service auditor reports
for certain service organizations. The firm identified and tested three compensating controls that it
believed would mitigate this deficiency but did not sufficiently evaluate the effect of these controls
because it (1) determined that one of these controls was ineffective and (2) did not identify that
the control owner of the other two controls was an individual the firm had identified as having
inappropriate access to the systems hosted by these service organizations. (AS 2201.68)
yy The firm did not perform any procedures to test controls at certain other service organizations or
identify and test any other controls over the revenue processed by the systems maintained and
managed by these service organizations. (AS 2201.39 and .B19)
In its testing of controls over certain revenue for both of these business units, the firm selected for
testing various IT-dependent manual controls that used data and reports generated or maintained by
certain of these systems. As a result of the deficiencies in the firm’s control testing over these systems as
discussed above, the firm’s testing of these IT-dependent manual controls was not sufficient. (AS 2201.46)
In addition, the firm selected for testing certain other controls over this revenue for these business units.
The firm did not identify and test any controls over the accuracy and completeness of the reports or data
that the control owners used in the performance of these controls. (AS 2201.39)
The firm did not perform substantive procedures to test, or (as discussed above) sufficiently test controls
over, the accuracy and completeness of certain reports or data that the firm used in its substantive
testing of certain revenue for both of these business units. (AS 1105.10)
The firm did not identify and test any controls over the issuer’s review of its goodwill impairment analysis.
(AS 2201.39)
The issuer changed the number of its reporting units in the current year for purposes of its annual
goodwill impairment analysis. The following deficiencies were identified:
yy The firm did not perform any procedures to evaluate whether the issuer’s change in the number of
reporting units was in conformity with FASB ASC Topic 350, Intangibles – Goodwill and Other, and was
preferable under FASB ASC Topic 250, Accounting Changes and Error Corrections. (AS 2810.30)
yy The firm did not perform any procedures to evaluate whether the goodwill associated with any of the
prior-year reporting units may have been impaired at the time of the issuer’s change in the number of
reporting units. (AS 2301.08)
yy The firm did not identify, and evaluate the significance to the financial statements of, the issuer’s
omission of a required disclosure under FASB ASC Topic 250 related to its change in the number of
reporting units. (AS 2810.30 and .31)
To test cash at one of the issuer’s business units, the firm performed confirmation procedures for a
sample of cash accounts. The firm did not maintain control over the confirmation requests because the
issuer sent the requests. (AS 2310.28) In addition, for the majority of the items in its sample, the responses
were returned by email. The firm did not perform substantive procedures that provided sufficient
appropriate audit evidence to verify the source of these responses. (AS 2301.08)
Issuer B – Industrials
Type of audit and related area affected
In our review, we identified deficiencies in the financial statement and ICFR audits related to Revenue.
yy The firm did not identify and test any controls over the accuracy of these labor hours. (AS 2201.39)
yy Certain of this revenue was generated from contracts that specified the maximum amount of
revenue that could be earned under each contract. The firm did not identify and test any controls that
addressed the risk that revenue may have been recognized in excess of these contractual maximums.
(AS 2201.39)
yy The firm used labor hours in its substantive testing of this revenue but did not perform any
substantive procedures to test, or in the alternative, test any controls over, the accuracy of these labor
hours. (AS 1105.10)
yy The sample sizes the firm used in certain of its substantive procedures to test this revenue were too
small to provide sufficient appropriate audit evidence because these procedures were designed
based on a level of control reliance that was not supported due to the deficiencies in the firm’s control
testing discussed above. (AS 2301.16, .18, and .37; AS 2315.19, .23, and .23A)
Issuer C – Financials
Type of audit and related area affected
In our review, we identified deficiencies in the financial statement and ICFR audits related to the
Allowance for Loan Losses (ALL).
yy The firm selected for testing controls that consisted of the issuer’s reviews of the ALL, including an
assessment of the qualitative factors for reasonableness. The firm did not evaluate the specific review
procedures that the control owners performed to assess the reasonableness of the qualitative factors.
(AS 2201.42 and .44)
Issuer D – Financials
Type of audit and related area affected
In our review, we identified deficiencies in the financial statement and ICFR audits related to the ALL.
yy The firm selected for testing a control that consisted of the issuer’s review of the qualitative factors
for reasonableness. The firm did not evaluate the specific review procedures that the control owners
performed to assess the reasonableness of certain qualitative factors. (AS 2201.42 and .44)
yy The firm’s approach for substantively testing the ALL was to review and test management’s process.
The firm did not sufficiently evaluate the reasonableness of the qualitative reserve component of the
ALL because the firm’s procedures to test certain qualitative factors the issuer used to determine the
reserve were limited to (1) reading the issuer’s ALL memorandum and its analysis of the factors and
(2) comparing the qualitative factors the issuer used at year end to those used in the prior year. (AS
2501.09, .10, and .11)
When we review an audit, we do not review every aspect of the audit. As a result, the area below was not
necessarily reviewed on every audit. In some cases, we assess the firm’s compliance with specific PCAOB
standards or rules on other audits that were not reviewed and include any instances of non-compliance
below.
In one of five audits reviewed, the firm did not make certain required communications to the issuer’s
audit committee related to the name, location, and planned responsibilities of an other accounting firm
that performed audit procedures in the audit. In this instance, the firm was non-compliant with AS 1301,
Communications with Audit Committees.
We include deficiencies in Part II if an analysis of the inspection results, including the results of
the reviews of individual audits, indicates that the firm’s system of quality control does not provide
reasonable assurance that firm personnel will comply with applicable professional standards and
requirements. Generally, the report’s description of quality control criticisms is based on observations
from our inspection procedures.
This report does not reflect changes or improvements to the firm’s system of quality control that the
firm may have made subsequent to the period covered by our inspection. The Board does consider such
changes or improvements in assessing whether the firm has satisfactorily addressed the quality control
criticisms or defects no later than 12 months after the issuance of this report.
When we issue our reports, we do not make public criticisms of, and potential defects in, the firm’s
system of quality control, to the extent any are identified. If a firm does not address to the Board’s
satisfaction any criticism of, or potential defect in, the firm’s system of quality control within 12 months
after the issuance of our report, we will make public any such deficiency.
The Board does not make public any of a firm’s comments that address a nonpublic portion of the
report unless a firm specifically requests otherwise. In some cases, the result may be that none of a firm’s
response is made publicly available.
In addition, pursuant to section 104(f) of the Act, 15 U.S.C. § 7214(f), and PCAOB Rule 4007(b), if a firm
requests, and the Board grants, confidential treatment for any of the firm’s comments on a draft report,
the Board does not include those comments in the final report. The Board routinely grants confidential
treatment, if requested, for any portion of a firm’s response that addresses any point in the draft that the
Board omits from, or any inaccurate statement in the draft that the Board corrects in, the final report.
RSM US LLP, PCAOB Release No. 104-2022-005, December 16, 2021 | A-1
October 29, 2021
30 South Wacker Drive
Suite 3000
Chicago, IL 60606
Mr. George Botic
Director, Division of Registration and Inspections
Public Company Accounting Oversight Board
1666 K Street NW
Washington, DC 20006
Re: Response to Part I of the Public Company Accounting Oversight Board (PCAOB) Draft Report on
2020 Inspection of RSM US LLP
On behalf of RSM US LLP, we are pleased to provide our response to Part I of the PCAOB’s Draft Report
on the 2020 Inspection of RSM US LLP dated September 28, 2021 (“Draft Report”).
We have thoroughly evaluated the matters described in Part I of the Draft Report and have taken
appropriate actions to address the findings in accordance with PCAOB rules and auditing standards and
our policies.
We support the PCAOB’s inspection process and believe that it helps us improve the quality of our audit
engagements. RSM US LLP is committed to using the inspection comments and observations to improve
our system of quality control. We have a long history of audit quality founded on our commitment to
integrity, objectivity and excellence.
We appreciate the opportunity to provide our response to the Draft Report and remain committed to
working with the PCAOB to improve audit quality.
Sincerely,
RSM US LLP, PCAOB Release No. 104-2022-005, December 16, 2021 | A-2