This paper investigates auditors' assessments of earnings manipulation risk and corporate governance risk, and their planning and pricing decisions in the presence of these identified risks. To conduct this investigation, we use engagement partners' assessments of their existing clients made during the participating public accounting firm's client continuance risk assessment process. We find that auditors plan increased effort and billing rates for clients with earnings manipulation risk, and that the positive relationships between earnings manipulation risk and both effort and billing rates are greater for clients that also have heightened corporate governance risk. These findings provide evidence that auditors assess situations involving both an aggressive management and inadequate corporate governance, and that there is a relationship between those assessments and auditors' planning and pricing decisions.

This study examines the association between corporate governance and disclosures of material weaknesses (MW) in internal control over financial reporting. We study this association using MW reported under Sarbanes-Oxley Sections 302 and 404, deriving data on audit committee financial expertise from automated parsing of member qualifications from their biographies. We find that a lower likelihood of disclosing Section 404 MW is associated with relatively more audit committee members having accounting and supervisory experience, as well as board strength. Further, the nature of MW varies with the type of experience. However, these associations are not detectable using Section 302 reports. We also find that MW disclosure is associated with designating a financial expert without accounting experience, or designating multiple financial experts. We conclude that board and audit committee characteristics are associated with internal control quality. However, this association is only observable under the more stringent requirements of Section 404.

2.Our sample is limited to the banking and insurance industries, which S&P has chosen to include in their ERM quality review. As noted later in the paper, results from highly regulated industries might not apply to other sectors. 3.While we include a series of lagged control variables to rule out the alternative explanation that poor ERM results in higher risk, we cannot entirely rule out this possibility.