Connect with us

Accounting

As AI rises in importance, so too does governance

Published

on

AI governance was a major theme of 2024, and as the technology continues to evolve, oversight and control—as well as ways to demonstrate it to others—will become even more important this year. 

This was the assessment of Danny Manimbo, a principal with Top 50 firm Schellman, who is primarily responsible for leading the firm’s AI and ISO practices. Speaking during the firm’s Schellmancon event today, he said that last year saw the release of a number of AI governance frameworks, including the National Institute of Standards and Technology’s AI Risk Management Framework, the International Standards Organization’s ISO 42001, and Microsoft’s revisions to its Supplier Security and Privacy Assurance Program to account for AI. Meanwhile, actual regulation is also gaining momentum, with Manimbo pointing to the EU’s AI Act, South Korea’s AI Basic Act, and a number of state-level regulations such as California’s recent AI laws. 

“That kind of set the tone for a lot of the inquiries and the interest that we saw, and for the trends on where GRC was going in 2024, maybe not so much immediately in the beginning of the year, because the frameworks were so new, but I think they were boosted by a number of things in the regulatory standpoint,” said Manimbo. 

The other panelist, Lisa Hall, chief information security officer for the trust platform SafeBase, added that, given the pace of AI advances, it is likely that last year’s measures were not the end but just the beginning, especially considering how widely used even the current generation of solutions is. 

“I think it’s only going to increase, and everyone seems to have some type of AI offering,” said Hall. “Regulations and standards will likely become more demanding, and even with the shadow IT capabilities we have now, I worry that we may be underestimating how often AI technologies are actually used by our employees. And also, on the flip side, how can we best leverage these to make our lives easier?”

Manimbo noted that, with this rise in control frameworks and regulation, this year will also see a rise in demand for ways to demonstrate that one is aligned and compliant with them. The ISO 42001 certification, for which Schellman recently became the first ANSI-accredited body allowed to audit and grant certification for compliance with the standard, is one example, but he anticipated other avenues will open this year. “For example, I sit on the [Cloud Security Alliance] AI Control Framework [board], and they are launching a program scheduled for the second half of this year which is going to be very similar to their [Security Trust Assurance and Risk] program for cloud security but specific to AI risk. That’ll be another avenue,” he said. He added that other standard setters, like the AICPA, might also decide to update their frameworks to account for AI risk. 

Such demonstrations are vital for establishing customer trust in a world that is increasingly connected. Hall noted that supply chains have grown much more complex, which has allowed attackers new opportunities to target vendors or third party software providers and compromise multiple downstream organizations at once. In such an environment, establishing trust with a customer is vital, but it can often involve lengthy and tedious audits filled with manual processes. While she has had success with some automation, such as using AI to reduce time on customer questionnaires and automate access controls, there remain many things that still need human intervention. 

“I’ve definitely struggled with that, like where an auditor is asking for data sets, you’re coming back with a sample set, you’re bouncing back and forth from a tool to gather evidence, and it becomes even more complex when you’re dealing with customer audits and you’re talking to more than one auditor, and you can only reuse evidence for so long that evidence goes stale,” she said. “And then a lot of times, auditors have competing platforms and tools that may not integrate with yours. So it’s still a manual process. There’s a ton of back and forth communication there. I’m still copying and pasting, I’m still downloading from here and uploading to here. So I’d love to see this process improve,”  

Manimbo noted AI has also been helping processes like this, noting that AI can itself help bolster an organization’s controls through automating routine processes and reducing dependence on manual processes. 

“On this front, some of the things that have plagued us in the past is the amount of context that we need as professionals to know if something is something that needs to be addressed immediately as part of a control failure that may be detected. And I think AI will help provide that context there… It may not necessarily be [about] what the controls may be, but how efficient are the models in augmenting existing automation to find those failures in a way that we can effectively address those findings in a way that we can again improve on those and so hopefully reducing additional burden on a team members,” he said. 

However, with all these different frameworks coming out, and with current ones being revised to account for AI, professionals may be challenged in keeping up with all the changes. Professionals need to not only know how to apply these frameworks but also how to scale them as time goes on. Hall said that, by maintaining a security-focused mindset and being proactive, so that the organization is more able to respond to change. 

“If we build and buy with security in mind and find ways to leverage automation and AI to enable us to quickly adjust, … we’re just going to be way better off,” said Hall.  “Instead of looking at ‘here’s the strict regulation, here’s what I have to do,’ [it is] kind of this afterthought, by being more proactive and just having these things in mind. .. I think it’s about us having that mindset of: How is the security built in? How can I be accountable and prove that I’m doing what I’m doing? And think about that before the auditors show up and before the regulations show up.”

Continue Reading

Accounting

Mandatory ESG Reporting Standards Demand Standardized Non-Financial Audit Trails

Published

on

Mandatory ESG Reporting Standards Demand Standardized Non-Financial Audit Trails

Corporate accounting departments face an expanded regulatory mandate as mandatory sustainability and Environmental, Social, and Governance (ESG) reporting frameworks take full effect internationally. Governed by the European Union’s Corporate Sustainability Reporting Directive (CSRD) and the International Sustainability Standards Board (ISSB) IFRS S1 and S2 standards, enterprise financial controllers are now legally required to track, verify, and report non-financial data with the same internal controls and auditability as traditional financial statements.

The expansion shifts ESG compliance

This regulatory expansion shifts ESG compliance from marketing departments to corporate accounting offices. Financial managers are now responsible for gathering, consolidating, and verifying carbon emissions metrics, supply chain labor conditions, water usage, and climate risk exposures across multi-tiered corporate structures. These non-financial metrics must be integrated into standardized general ledgers to withstand rigorous third-party audit assurance processes.

To comply with these rigorous reporting mandates, accounting software providers have added dedicated ESG modules designed to aggregate data from IoT sensors, utility platforms, and vendor management systems. Controllers are implementing internal control frameworks—modeled after traditional COSO frameworks—to ensure the completeness, accuracy, and consistency of sustainability disclosures, protecting organizations against greenwashing penalties and litigation risks.

The transition requires significant cross-functional collaboration between accounting teams, legal counsel, and operational directors. Accounting professionals are expanding their technical expertise beyond financial ledgers to master carbon accounting methodologies, lifecycle assessment standards, and non-financial data governance protocols, fundamentally expanding the role of the modern corporate accountant.

Why This Information Matters
Mandatory ESG disclosures require companies to treat environmental and social metrics as audited financial records. Executives, accountants, and board members must institute formal tracking and assurance processes to satisfy legal mandates, maintain investor confidence, and mitigate regulatory non-compliance risks.

Continue Reading

Accounting

SEC’s Semiannual Reporting Proposal Faces Investor Pushback: What CFOs Need to Know

Published

on

U.S. Securities and Exchange Commission (SEC)

A proposal from the U.S. Securities and Exchange Commission to potentially shift some public companies away from quarterly financial reporting toward a semiannual model is drawing significant pushback from investors, even as it continues moving through the regulatory process. The debate has direct implications for corporate finance teams, auditors, and the broader transparency of U.S. capital markets.

What the SEC Proposed

According to a summary published by accounting advisory firm Cohen & Co., the SEC issued a proposed rule on May 19, 2026, aimed at simplifying financial reporting requirements for many U.S. public companies. The proposal would potentially reduce the frequency of certain mandatory disclosures from quarterly to semiannual, a structural change that has not been made to core U.S. reporting requirements in decades.

The proposal follows an extended debate within U.S. policy circles, with proponents arguing that reduced reporting frequency could lower compliance costs and free up management time for longer-term strategic planning rather than quarter-to-quarter results management.

Why Investors Are Pushing Back

Comment letters submitted in response to the proposal have been extensive, and according to Cohen & Co.’s review of the public record, investors “appear to be largely opposed” to the shift, viewing frequent interim reporting as a core benefit of U.S. capital markets relative to other jurisdictions.

Accounting and law firms have taken a more measured position, generally urging any changes to remain aligned with the Financial Accounting Standards Board (FASB), whose existing disclosure requirements and guidance are built around a quarterly reporting cadence. A shift to semiannual reporting without corresponding changes to FASB guidance could create friction between SEC filing requirements and GAAP-based disclosure expectations.

Lessons From the U.K. Experience

The debate is not without precedent. The United Kingdom moved away from mandatory quarterly reporting for listed companies in 2014, returning to a semiannual disclosure requirement. According to Cohen & Co.’s analysis, that experience offers a cautionary data point: there was no measurable increase in capital expenditure or R&D investment following the change, while analyst coverage of affected companies declined as reliable interim information became less available — a particular risk for smaller and newly public companies that rely on analyst coverage to maintain investor visibility.

Practical Implications for Finance Teams

Beyond the debate over disclosure philosophy, the proposal carries practical complications. Many companies have debt covenants and credit agreements structured around quarterly financial delivery; a shift to semiannual reporting could require renegotiating those terms. Reduced reporting frequency would also extend the “window of market silence” between disclosures, a factor that governance and investor-relations teams would need to manage carefully to avoid information asymmetry.

Separately, and unrelated to the reporting-frequency debate, the SEC and FASB have continued finalizing more routine updates this year. New Accounting Standards Updates are taking effect for December 31, 2026, fiscal year-ends covering income tax disclosures, credit loss measurement, induced debt conversions, and stock compensation, according to Eide Bailly’s review of 2026 ASU activity. Additional guidance on paid-in-kind dividends and environmental credits is also on the near-term horizon.

What to Watch Next

The semiannual reporting proposal remains in the comment and review phase, and no final rule has been adopted as of this writing. Finance leaders should monitor the SEC’s regulatory agenda for further movement, while treating the current quarterly reporting requirement as the operative standard until any final rule is issued and an effective date is set.

Given the extent of investor opposition documented in the comment file, a full shift to mandatory semiannual reporting appears more likely to result in either a scaled-back compromise or continued study rather than swift adoption — though the SEC’s ultimate direction remains uncertain.

 

Continue Reading

Accounting

AI-Driven Automation and Continuous Accounting Frameworks

Published

on

The accounting profession is undergoing a fundamental structural transition as enterprise finance departments shift from periodic month-end closes toward automated continuous accounting models. By integrating specialized machine learning algorithms directly into enterprise resource planning (ERP) platforms, chief accounting officers are transforming financial reporting from a retrospective exercise into a real-time operational asset.

The Shift from Periodic Close to Continuous Financial Reporting
Traditional accounting workflows heavily relied on manual data reconciliation, spreadsheet calculations, and multi-week closing cycles at the end of each fiscal period. In contrast, continuous accounting frameworks utilize automated software agents to process, validate, and post transactional data in real time as business activities occur.

Automated bank reconciliation tools cross-reference incoming bank feeds, invoice records, and purchase orders automatically. By resolving transactional variances instantly throughout the month, corporate accounting teams eliminate the traditional workload spikes associated with quarterly and annual closes.

Machine Learning in Audit Trails and Anomaly Detection
Advanced natural language processing (NLP) and machine learning tools are redefining internal audit and financial control environments. Automated systems analyze 100% of general ledger entries, identifying anomalous transactions, duplicate payments, and unauthorized journal entries in real time.

Rather than relying on random statistical sampling, corporate internal auditors can focus their attention on high-risk flags automatically surfaced by algorithmic monitoring platforms. This continuous risk assessment strengthens internal controls over financial reporting (ICFR) and significantly reduces fraud risk.

Evolving Roles for Accounting Professionals
As routine data entry and manual reconciliation tasks become fully automated, the skill set required for accounting professionals is shifting toward data analysis, system design, and strategic business advisory.
– Systems Governance: Accountants are increasingly responsible for monitoring algorithmic accuracy and managing data integration pipelines.
– Business Partnership: Finance professionals leverage real-time financial dashboards to advise operational leaders on margin management and working capital allocation.
– Regulatory Compliance Management: Accounting teams utilize automated platforms to ensure compliance with dynamic tax codes and international accounting standards.

Core Implementation Recommendations
1. Deploy Automated Reconciliation Tools: Integrate continuous transaction processing modules into existing enterprise ERP architectures.
2. Establish Algorithmic Governance Controls: Implement strict internal testing protocols to ensure automated accounting rules comply with GAAP/IFRS standards.
3. Reskill Accounting Teams: Invest in training finance staff on data analytics, workflow automation, and predictive financial modeling.

Continue Reading

Trending