Co-authored by David S. Kravitz.
On March 4, the Securities and Exchange Commission published notice that The NASDAQ Stock Market LLC (NASDAQ) had filed a proposed new rule that would require each NASDAQ-listed issuer to maintain an internal audit function. The internal audit function would be tasked with providing the issuer’s management and audit committees with an ongoing assessment of the issuer’s risk management processes and system of internal control. Under the proposed rule, an issuer would be permitted to outsource the internal audit function to any third party other than its independent auditor. Additionally, the audit committee would be required to meet periodically with the persons performing the internal audit function and should discuss the role of the internal audit function with the issuer’s outside auditors.
NASDAQ stated in its rule proposal that the purpose of the new rule is to ensure that a listed issuer has a mechanism in place to regularly review and assess its system of internal control, and to ensure that the listed issuer’s management and audit committees are provided with current information about risk management processes and systems of internal control. Additionally, NASDAQ believes that the rule will assist listed issuers in complying with their federal securities law obligations to maintain and evaluate, with the participation of their principal executive and financial officers, the effectiveness of the internal control over financial reporting.
Under its proposal, an issuer that is listed on NASDAQ on or before June 30, 2013 would be required to establish an internal audit function no later than December 31, 2013. An issuer that becomes listed after June 30, 2013 would be required to establish an internal audit function prior to listing on NASDAQ.