More Debits & Credits Posts

Audit Committees Should Watch for Third-Party Risks

February 17, 2016

Audit committees need to have oversight of risks to their organizations from third parties such as suppliers, distributors, sales people and service providers, according to a new report.

The report, “Oversight of third-party risks,” is part of PricewaterhouseCoopers’ Audit Committee Excellence Series. It points out that companies today are increasingly interlinked with their suppliers, distributors and other providers. However, these third parties can pose both reputational risks to companies’ brands, not to mention compliance and regulatory risks.

Bribery of officials abroad, for example, can expose companies to penalties under the Foreign Corrupt Practices Act. Besides bribery, other third-party risks could relate to environmental issues, software piracy, health and safety, and labor laws.

Many corporate boards assign risk oversight to the audit committee since it’s typically responsible for financial reporting compliance and internal controls. The audit committee also oversees the internal audit function, which increasingly has been tasked with risk management duties.

Unlike most risks, though, third-party risks are often governed by legal contracts spelling out the obligations, rights and recourses of the company and its providers, the report points out. But because third-party risks are oftentimes not covered by a company’s existing risk assessment processes, they ought to be a distinct part of the company internal controls system. The audit committee needs to understand how many significant third-party relationships a company has and the nature of those relationships. They should also evaluate whether the company’s legal counsel is engaged enough in third-party risk control and if they understand the importance of their role.

To access the report, click here. For other reports in PwC’s Audit Committee Excellence series, click here. PwC’s Governance Insights Center homepage is here.

Comments (1)
Does it really take a publication from some excellence committee of a member of the Final 4 to let the Audit Committee in on this news? My first accounting firm job out of college in 1970 had a very neat little publication that was designed for the entire board of directors that covered all of these obvious items. It was sent at no charge to any and all who either were clients or should have been.
I know that if the purchasing agent turned up with a new car or began discussing his very expensive vacation, that person's job received very "special" attention by the auditors. Interesting what you could learn by keeping your eyes and ears open and mouth shut!
Posted by topbeancounter | Friday, February 19 2016 at 9:55AM ET
Add Your Comments:
Not Registered?
You must be registered to post a comment. Click here to register.
Already registered? Log in here
Please note you must now log in with your email address and password.