Posts

The decision to go IPO is one of the most exciting milestones in a company’s journey—and the start of an incredibly busy and challenging time. While the decision tends to center on the big event, the work leading up to the initial public offering and afterward is enormous and can strain an already busy team. For CFOs and other senior executives who need to lead their company through their initial public offering, here is a guide to going public.

A CFO Guide to IPOs: Don’t Underestimate the Work Involved 

Going IPO is complex and expensive—and time consuming. The prep work leading up to the IPO could take as long as two years. Smart companies build their infrastructure well in advance to be ready for the moment. Then there’s the constant scrutiny that becomes a way of life once the S-1 gets in the hands of analysts, investors and competitors.

You’ll need to be ready for the possibility that regulators will have a lot of questions, in addition to inquiries from savvy investors. Making the wrong move at any point could hurt the company’s growth potential and lead to employee burnout, just when you need your most valued performers the most. You’ll want to cover your bases before finalizing the decision to go public:

Make sure you’re doing it for the right reasons: Personal wealth buildup and boosts to the ego are side benefits to a successful IPO—but the focus should be on raising capital to fund the company’s growth plans.

Consider the alternatives: To explore whether going public makes the most sense for the business at this time, also weigh the pros and cons of other exit strategies, such as a merger or acquisition, strategic alliance, or private equity funding.

Picture the changes ahead: The company as you know it is going to change, as it moves from an organization run by just a few people to a company owned by anyone who wants to buy a piece. Investors will have a right to some decision-making power, and management will no longer have all the control. 

Preparing for Your IPO

Is your company IPO ready? Smart companies that have an IPO in their sights get their financial house in order early on. But you’ll need more than audited financial statements and an S-1 filing to be “ready.” Here are few of the many other steps you’ll need to cover:

  • Know your story: Consistency matters, from the prospectus to the words on your website to the narratives told by senior leaders as they promote the company at roadshows. Anticipate questions and have potential answers ready. How the company describes its talent, product roadmap, geographic expansion and goals, can highly influence share price. 
  • Act like the company is already public: By operating like a public company, as early as a year before the IPO, you can make improvements along the way, such as upgrading outdated systems, wiping out manual processes and overcoming the learning curve of SEC requirements.
  • Develop a SOX timeline: You’ll have until the second 10-K to submit your first Sarbanes-Oxley compliance report, but you’ll need a well-designed system of internal controls that will help prevent material misstatements to financial statements well before that time.

Managing Your Company Through the Post-IPO Transition

A culture shock is inevitable as the company takes on a more disciplined way of operating. Decision-making will be centered around short-term needs and results, rather than the long term. Employees need to be kept informed about the company’s direction in addition to the new expectations on behavior as they’ll have to follow to comply with insider trading rules and restrictions.

Decide how much of your old culture to retain, figure out how to manage the new one, and evaluate the staff to take note of any skill gaps. You’ll need people who are open-minded and willing to switch to new systems and processes, while being able to meet stricter deadlines and shorter turnaround times.

RoseRyan as Your IPO Guide 

As you can tell from this IPO guide, operating as a public company is like living in a whole other world. You need people who have taken companies through the entire IPO process who can help you make sense of it, and thrive in it. They’ll guide you through the before and after of the IPO, by keeping you informed about what to expect, preparing the company for this new world, and getting it through the rocky transitional period. And they’ll fill in the skills gaps and situate your staff with the new way of working. (We’ve also served as a US IPO guide for companies based outside the country that want to list here.)

With tight financial accounting and reporting, and a robust system with efficient, practical processes, the company will be set up for a maximum valuation and its new class of investors. Learn all about RoseRyan’s Transaction Advisory Services and how we can manage your IPO process from start to finish.

Scaling the business is a top goal for many startups at a certain point. To get to the next level, it’s time to invest in the skills your company is missing, at a pace that isn’t too much, too soon. Since the people aspect of the business is both your most valuable and priciest resource, you’ll want to put attention on scaling your people as you scale your business.

What Do We Mean by Scaling?

Scaling puts the focus on growing the business with intention, in a cost-effective, efficient way. It requires laying down a foundation for supporting and enabling this growth, with streamlined, consistent processes; order in the financial operations; with the right people, systems, and partners in place. For emerging growth companies, shifting gears from survival mode to scaling requires big changes, including new faces—but that doesn’t mean you need to fully load up on payroll right away.

Scaling for Skills: What Do You Have, What Do You Need?

Take a look at your current employees and leadership team, and consider what skillsets you may need to bring in now and over time:

Evaluate everyone. Some of the people who were once a good fit for getting the company off the ground may not be right for the new version of the company. Look at the strengths and weaknesses within your staff. You may need to rethink some roles, add new ones, and consider how outsourcing can fill in some gaps, on a flexible basis. These evaluations may lead to tough calls if some employees are not able, or unwilling, to scale with the company.

Understand current and future gaps. What skills will make the company stronger starting today? What about the significant changes you’ll be pursuing? If an IPO is on the horizon, for example, does anyone on staff have experience working at a publicly traded company? The expectations and scrutiny are higher, and experience with all that entails will be needed.

Don’t underestimate the need for flexibility. For the immediate future, as the company adopts new processes and systems, you’ll want to know whether the people you have on board are adaptable and open to change. Changes are never easy, but some people are roadblocks. You want people who are excited to—or at least willing to—learn and adapt to new technologies and new ways of working (smarter, not harder).

Be forthcoming about the changes. Some employees will discover that the future version of the company is not for them. They simply may prefer working in a startup environment and are averse to adjusting to a more structured environment.

People Principles for Scaling

Follow these principles as you become aware of the people who want to grow with the company, and the fluctuating skills you will need to bring in:

Make a plan. How will you take the company from point A to point B? How will you fund any expansions without burning through too much cash? What skills are missing and need to be filled now, and what skills could be filled later? And which skills could be outsourced for a time before hiring someone full-time? 

Build a great team and help them shine. Put effort into bringing out the best of those who are staying on board. The culture will shift as the company evolves but you can shape it into the kind of environment where people feel welcome, where they want to be their best selves and do their best work. Think about how the company can nurture the talents you have and keep everyone engaged. Let your star performers do what they do, and move out of the way so that they can shine.

Be creative with the skills you need. Outsourcing skills that are not core to the business (i.e., finance and accounting, marketing, IT) can help you supplement any missing skillsets that will help the company advance, build in cost control to your growth plans, and free up those star performers and other employees to focus on core functions.

Outsourcing provides optimum flexibility by reducing the risk of taking on full-time staffers for what could end up being a temporary need. When you find an outsourcing partner that can provide you with a range of talents and knowledge, you can access the level of expertise you need, when you need it.

Gaining Expertise, at the Right Level

For nearly 30 years, RoseRyan has helped hundreds of fast-moving companies achieve their growth goals, by helping them build practical plans; develop solid financial foundations; and supplement their skillsets with flexible, cost-efficient solutions. Access to expertise, at a part-time level in the beginning of the scaling effort, can help the company control costs and move at a sustainable pace. Then, as the company successfully advances with its plan, RoseRyan will train and transition incoming full-timers at the appropriate time. It’s one of the many ways we guide companies to greatness.

Ready to make a strategic move with your emerging growth company? Contact RoseRyan today to find out how we can help.

As Chair of RoseRyan, which she founded in 1993, Kathy Ryan guides our finance and accounting consulting firm’s overall mission, strategy, direction and investment decisions. She guided the firm for 26 years under an innovative business model, with flexible work arrangements coupled with a highly supportive, values-based culture, before naming David Roberson as chief executive in 2020. Kathy has been recognized as a thought leader, innovator and strategist, building upon her extensive CEO and CFO experience working with more than 50 Silicon Valley startups. Before RoseRyan, Kathy was director of finance at Quantum and tax manager at Price Waterhouse.

As we head into the home stretch for this year’s SOX programs, we thought it would be helpful to highlight some key areas of focus by auditors that deserve particular attention this year. No year is ever the same: From dealing with pandemic-related risks to implementing new accounting standards, companies always have new considerations when it comes to complying with SOX. Based on my SOX crystal ball, here’s what I expect will be key areas of focus in SOX assessments.

How Is Your SOX Compliance in These Key Areas?

Not surprisingly, auditors’ areas of focus tend to align with the areas that the Public Company Accounting Oversight Board has been prioritizing during its inspections. Here’s what the PCAOB says about that:

“While inspections vary by firm, we may focus on auditor’s risk assessment processes, financial reporting, and audit areas affected by economic trends or pressures, audit areas that present challenges and significant risk, new accounting standards, and areas of recurring audit deficiencies.”

What does this thinking mean for SOX compliance in 2021? Well, let’s start with areas of recurring audit deficiencies—we’ve seen internal controls over financial reporting on that list for many years, and no matter how much effort companies put into making improvements, it still isn’t enough in the PCAOB’s view. With all this mind, here some aspects of ICFR that merit your attention this SOX season:

Risk assessment process: Spend the time to prepare a thorough risk assessment and include robust documentation. Have you identified all the areas for potential material misstatements? Do you have controls to mitigate your significant risks? Are all your financial statement assertions covered?

Many companies have addressed the risks in their control set associated with the sudden shift to remote work made because of COVID shelter-in-place orders, but the pandemic continues to present risks to the business. We continue to see supply chain shortages crop up as well as other new impacts of our pandemic life. Be sure you have addressed key changes to your business in your risk assessment.

If you’ve recently adopted new accounting standards, such as ASC 606 (Revenue) or ASC 842 (Leases), or refined your workflow and processes in these areas, make sure you’ve updated your design of controls to reflect the new risks and process flows as part of your sox compliance program.

Management review controls: This has been on the PCAOB list for quite some time—so expect to see further scrutiny here. Look to stated precision levels utilized in the management review process and what the reviewer does when something falls outside those threshold levels, or what happens when the process doesn’t follow the “normal” process. Your auditors will likely expect to see documentation showing that you’ve done these steps for each review.

Completeness and accuracy of IPE: From a SOX perspective, IPE, or “information produced by the entity,” means documenting how control operators satisfy themselves that the data used in the execution of the control is complete and accurate. It sounds simple enough, and yet this is an area that gives most people trouble. We see the whole range of reactions in our client base—from control owners who say, “I get this report from our IT team—it’s their job to make sure it’s complete and accurate” to “It’s a canned report from a leading cloud company—of course it’s complete and accurate.” The reality is, the responsibility for completeness and accuracy is shared between the application owner and the application user.

Let’s break this down even further:

For canned reports—standard reports that you run from a third-party application—you’ll need to demonstrate the report was generated using the appropriate parameters, that the calculations performed in the report are accurate, and that the vendor has effective access and change management controls in place.

  • Parameters: Verify that the parameters used to generate the report are correct, and indicate that you have reviewed them. You can do that by tick mark, a highlight, whatever works for you. But you really do need to look at the parameters—we’ve seen companies run Q1 reports with the dates of January 1 to March 30. The after-the-fact argument of “there was no activity on March 31” isn’t going to fly—the only way to prove that is to run the report using the right date. We’ve also seen stock reports run without a complete population (e.g., it’s missing one of the stock plans).
  • Accuracy of calculations: Verification of calculations performed can be accomplished a few ways—it could be the vendor actually does this verification and includes it in the SOC 1 report. If that’s the case, you can rely on that. Most of the time, a SOC 1 report doesn’t cover this, so you’ll need to do your own verification. Generally a “test of one” will suffice—but be sure you do a “test of one” on all the use cases, not just one. (Here’s a simple example: You can manually recalculate monthly depreciation expense for a single asset and compare your calculation to the report output—if it matches, you’re good. But also include a test for a fully depreciated asset, for an asset added during the month and for an asset retired during the month.)

Digging Deeper into SOC 1 Reports

Effective assessment of a SOC 1 report could be a blog topic in and of itself—so we’ll just hit some highlights:

Make sure the SOC 1 report covers the period you are relying on and it has a bridge letter to get you to the end of your fiscal year. Many vendors will issue a SOC 1 report covering the period through September or October, and then issuing a bridge letter saying there were no changes through December 31. For a calendar year-end company, that should work. If your fiscal year-end is different, you’ll need to do additional work here.

You should also evaluate if the design of controls listed in the report covers the key risks you need covered, and whether any testing exceptions were noted. If there are missing controls, you’ll need to do something more on your end (such as verification of calculations). If there are testing exceptions, then evaluate the impact to your organization—it could be the exception is in an area you are not relying on, or you might have compensating controls in place to mitigate the risk.

The SOC 1 report will also list out any sub-service organizations the vendor relies on, and whether the report includes controls from the sub-service organization. Often they are excluded, so you will need to obtain and review those SOC 1 reports separately. Finally, look at the list of User Control Considerations—controls that the vendor expects you to have in place, typically around access, and evaluate whether your controls address those areas.

You’ll need to go through a similar process for information used in control execution that is developed in-house and for calculations in Excel workbooks, such as tax provisions, data from a data warehouse that was extracted from other systems, custom reports, queries and scripts, etc.

Always Be on Top of SOX Trends

SOX compliance is always evolving. The SOX experts at RoseRyan can help your company master the latest key areas of focus and ensure that your company not only meets compliance requirements but does so in an efficient way that can be carried over to future years. To learn more about how we can create a tailored SOX program for your company and our SOX philosophy, see our latest video , and contact us to help you with your SOX program.

Pat Voll is a vice president at RoseRyan, where she guides and develops new solutions for our strategic advisory practice, which includes corporate governance, strategic projects and operational accounting. She also manages multiple client relationships and oversees strategic initiatives for the firm. Pat previously held senior finance level positions at public companies and worked as an auditor with a Big 4 firm.

Sarbanes-Oxley compliance has come an incredibly long way since the corporate governance law was passed nearly two decades ago. That doesn’t mean startups are in a hurry to become SOX compliant. Still, for a high-growth startup that may one day go public, its SOX-like compliance efforts can give assurance to management and investors that the company’s financial reporting can be relied upon.

What makes SOX compliance more clearly beneficial, compared to the early days of the anti-fraud law, is the significant financial operational efficiencies that open up when companies assess and tighten up their internal controls over financial reporting. With the help of financial integrity experts, they can realize such efficiencies as they start understanding and documenting their internal controls.

As your early stage startup contemplates the future, including potential exit strategies, what would you need to do to become SOX compliant?

SOX Compliance for Startups

Tip 1. Firm up your financial foundation. Your emerging growth company’s venture into the public markets might seem far away. Strategic opportunities can unexpectedly arise, however, in the form of a SPAC (special purpose acquisition company) merger, accelerating your company’s need to be IPO ready or SOX ready. Despite whatever strategic plan is in the works, the financial foundation of your startup should be sound so that you have the level of financial information and analysis needed to confidently move the company in the right direction.

Have investments in technology kept up with the size and complexity of the company and where it’s headed? Are your accounting processes practical and leading to timely, credible financial reports that are auditable? Do you have access to the kind of strategic financial expertise required to help you move the startup forward?

Tip 2. Keep current on your key risks. As your startup quickly moves ahead, your risk management efforts need to be adjusted. Risks change as the markets change, as new employees are brought in, as the economy shifts, and as customer demographics evolve. A large part of SOX compliance involves understanding the current major risks facing the company, so risk management for IPO-headed startups is also important.

Tip 3. Seek expertise early and often. Whether your company needs a version of “SOX lite” right now, an idea of whether it’s headed in a smart direction in its growth journey, or simply some expert advice, you need the right expertise to help you. Amid fast growth and your assessment of your high growth startup compliance, you’ll likely find that you need more insights than you can find in-house.

You’ll need to connect with experts who will adjust their guidance to where your startup is right now and then will be there with relevant solutions as those needs change. Seek out a finance and accounting consulting firm that understands emerging growth companies like yours as well as the version of the company you hope it will become.

Do the consulting firm’s experts have experience in your industry, with companies like yours? And if they don’t, how can they meet your needs? Look for a consulting firm that tailors its solutions to their clients rather than trying to bend a company toward its solutions.

Tip 4. Be prepared to act like a public company. Does your team have the skills and resources to meet the ongoing financial reporting demands and SOX requirements of a newly public company? The deadlines are not flexible once your company goes public, and the scrutiny is higher. Pre-IPO companies can ease into meeting the higher expectations by truly understanding what it takes to act like a public company, including SOX 404 compliance and all that entails.

Some of the main internal controls that a public company is expected to adopt are simply best practices that every company should be doing, such as segregation of duties. Undertaking good habits as early as possible can minimize the risk of a material misstatement of the financial statements.

Tip 5. Communicate with your external auditors. Here’s a tip that not everyone intuitively realizes is a possibility: You can proactively check in with your external auditors to understand their expectations.

SOX experts can help you keep these communication lines open, while retaining independence between your startup and the auditors. This way you can understand what auditors want to know and minimize any back and forth that would require your attention. After all, you have so many other responsibilities besides SOX compliance for startups.

How Does Sarbanes-Oxley Affect My Startup?

You may be wondering, “How do I implement SOX in my high-growth startup?” The short answer is startups do not have to be SOX compliant until they are public. Depending on your current growth plans, however, you could find that your startup should work toward becoming SOX ready. To set the wheels in motion, reach out to SOX and financial integrity experts who can help guide your company through what you can and should do now, based on your current growth plans.

Getting a small business or startup past the two-year mark is just one of many promising milestones. So many young companies fail early, so passing certain goalposts can be gratifying to the owners and entrepreneurs of an “emerging growth company,” a fast-moving business that may be venture backed or will soon seek significant funding. How can you ensure a bright future as you build your business? Here are a few strategies that have worked for others who have successfully built a business.

The Basics of an Emerging Growth Company

There are various definitions of an emerging growth company. The most prominent comes from the U.S. Securities and Exchange Commission, which considers an emerging growth company to have less than $1 billion in total annual gross revenue in its most recent fiscal year. This qualification allows a pre-IPO company to follow reduced disclosure and reporting requirements for its registration statement with the SEC.

Another way to characterize an emerging growth company is by its stage in the business lifecycle. An emerging growth company not only shows promise, it is in the process of developing or solidifying a strong foundation on which to further build the business.

Still running on minimal resources, it’s received some validation from investors and customers, and it may or may not go public one day. The business is moving at a fast clip and probably wants to get on more solid footing. It’s around this time that leaders of the company realize they could use some help with understanding their business and how it’s performing. There are strategic decisions to be made, to take the company in the right direction, but any moves need to be based on timely, reliable financial data and what that data means.

The company may not yet be ready for a full-time CFO at this point, however. An outsourced accounting team with a part-time controller could be the right fit for getting the finances in order and gaining a better understanding of the business. Are the current plans realistic? What do we need to adjust in order to reach our main goals?

When companies are first starting out, really early on, there may not be much of a plan—more of a hope to explore if a tech innovation can turn into a marketable product. Or the start of a potentially life-saving drug that will need full funding and interest to get it through the development phases. Such companies start out by just getting by with minimal resources for completing payroll, recording transactions, and paying the bills. As the company builds up, however, the need for a different level of financial expertise quickly becomes clear. Establishing finance and accounting processes, getting on the right systems for the company’s size and complexity, and having CFO-level expertise when needed as the company prepares to seek funding are all steps toward  building a successful emerging growth business. These are steps for moving beyond the “building a startup” phase toward a brighter future.

The Essentials of Building a Successful an Emerging Growth Company

Is your emerging growth company prepared for the changes ahead? Do you wonder “How do I properly build my company?” or “What are the best ways to grow my business?” Start off by considering if you have some of the essentials:

  • A tailored plan for growth—that takes into account your talent, your goals, and where the company is at this moment
  • A tech stack of integrated applications (including software for accounting, payroll, expense management) to keep your financial operations running smoothly
  • Senior level financial expertise that can offer timely guidance as the company pursues growth plans or goes after funding
  • An honest, practical understanding of the business performance and forecasted future

Financial Reporting Requirements for Emerging Growth Companies

The expectations of an emerging growth company expands quickly once it pursues either debt or equity funding. It may need a higher level of financial help as it brings in more people and more talent to meet rising customer demand, ramp up sales and marketing efforts, or pursue an acquisition. While the company scales up, it also requires more structure and an understanding of whether and how it can keep up the pace with the resources it has and is planning to take soon. The company’s growth depends on making the right decisions.

Its financial reporting efforts need to be robust for the sake of decision-makers but also for its growing circle of stakeholders. Lenders will likely want to see audited financial statements, for instance, and the company would have to embark on a long and potentially complicated process to get that first audit complete. Many inquiries are likely to follow, so you’ll want a dedicated expert around who can support the company during the audit process, so everyone else can focus on their day jobs.

How Do You Build a Successful Business?

The million-dollar question any new entrepreneur wants to know: How do you build a successful business? Those who have done it know that it’s more than the product you sell or the idea you come up with. Your company could have the greatest, most unique idea for an app that every American will want to subscribe to over the next year. But, as your company considers adding this on to its portfolio, will it be able to keep up with demand? Does it have the capability of forecasting how long that demand will last? If your outlook is unrealistic, you could be setting up the company for a lot of disappointment—and disappointed users.

Make sure you have the information you need, exactly when you need it. When it’s time for your emerging growth company to further develop the finance function, bring in more finance and accounting expertise, and lean on growth consulting pros, you know where to reach us.