Case Studies in Revenue Cycle Turnaround

In general, compliance means conforming to a rule, such as a specification, policy, standard or law. Compliance has traditionally been explained by reference to deterrence theory, according to which punishing a behavior will decrease the violations both by the wrongdoer (specific deterrence) and by others (general deterrence). This view has been supported by economic theory, which has framed punishment in terms of costs and has explained compliance in terms of a cost-benefit equilibrium (Becker 1968). However, psychological research on motivation provides an alternative view: granting rewards (Deci, Koestner and Ryan, 1999) or imposing fines (Gneezy Rustichini 2000) for a certain behavior is a form of extrinsic motivation that weakens intrinsic motivation and ultimately undermines compliance.

Regulatory compliance describes the goal that organizations aspire to achieve in their efforts to ensure that they are aware of and take steps to comply with relevant laws, policies, and regulations.^[1] Due to the increasing number of regulations and need for operational transparency, organizations are increasingly adopting the use of consolidated and harmonized sets of compliance controls.^[2] This approach is used to ensure that all necessary governance requirements can be met without the unnecessary duplication of effort and activity from resources.

Regulations and accrediting organizations vary among fields, with examples such as PCI-DSS and GLBA in the financial industry, FISMA for U.S. federal agencies, HACCP for the food and beverage industry, and the Joint Commission and HIPAA in healthcare. In some cases other compliance frameworks (such as COBIT) or even standards (NIST) inform on how to comply with regulations.

Some organizations keep compliance data—all data belonging or pertaining to the enterprise or included in the law, which can be used for the purpose of implementing or validating compliance—in a separate store for meeting reporting requirements. Compliance software is increasingly being implemented to help companies manage their compliance data more efficiently. This store may include calculations, data transfers, and audit trails.^[3][4]

The International Organization for Standardization (ISO) and its ISO 37301:2021 (which deprecates ISO 19600:2014) standard is one of the primary international standards for how businesses handle regulatory compliance, providing a reminder of how compliance and risk should operate together, as "colleagues" sharing a common framework with some nuances to account for their differences. The ISO also produces international standards such as ISO/IEC 27002 to help organizations meet regulatory compliance with their security management and assurance best practices.^[5]

Some local or international specialized organizations such as the American Society of Mechanical Engineers (ASME) also develop standards and regulation codes. They thereby provide a wide range of rules and directives to ensure compliance of the products to safety, security or design standards.^[6]

Regulatory compliance varies not only by industry but often by location. The financial, research, and pharmaceutical regulatory structures in one country, for example, may be similar but with particularly different nuances in another country. These similarities and differences are often a product "of reactions to the changing objectives and requirements in different countries, industries, and policy contexts".^[7]

Australia's major financial services regulators of deposits, insurance, and superannuation include the Reserve Bank of Australia (RBA), the Australian Prudential Regulation Authority (APRA), the Australian Securities & Investments Commission (ASIC), and the Australian Competition & Consumer Commission (ACCC).^[8] These regulators help to ensure financial institutes meet their promises, that transactional information is well documented, and that competition is fair while protecting consumers. The APRA in particular deals with superannuation and its regulation, including new regulations requiring trustees of superannuation funds to demonstrate to APRA that they have adequate resources (human, technology and financial), risk management systems, and appropriate skills and expertise to manage the superannuation fund, with individuals running them being "fit and proper".^[8]

Other key regulators in Australia include the Australian Communications & Media Authority (ACMA) for broadcasting, the internet, and communications;^[9] the Clean Energy Regulator for "monitoring, facilitating and enforcing compliance with" energy and carbon emission schemes;^[10] and the Therapeutic Goods Administration for drugs, devices, and biologics;^[11]

Australian organisations seeking to remain compliant with various regulations may turn to AS ISO 19600:2015 (which supersedes AS 3806-2006). This standard helps organisations with compliance management, placing "emphasis on the organisational elements that are required to support compliance" while also recognizing the need for continual improvement.^[12][13]

In Canada, federal regulation of deposits, insurance, and superannuation is governed by two independent bodies: the OSFI through the Bank Act, and FINTRAC, mandated by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, 2001 (PCMLTFA).^[14][15] These groups protect consumers, regulate how risk is controlled and managed, and investigate illegal action such as money laundering and terrorist financing.^[14][15] On a provincial level, each province maintain individuals laws and agencies. Unlike any other major federation, Canada does not have a securities regulatory authority at the federal government level. The provincial and territorial regulators work together to coordinate and harmonize regulation of the Canadian capital markets through the Canadian Securities Administrators (CSA).^[16]

Other key regulators in Canada include the Canadian Food Inspection Agency (CFIA) for food safety, animal health, and plant health; Health Canada for public health; and Environment and Climate Change Canada for environment and sustainable energy.^[17]

Canadian organizations seeking to remain compliant with various regulations may turn to ISO 19600:2014, an international compliance standard that "provides guidance for establishing, developing, implementing, evaluating, maintaining and improving an effective and responsive compliance management system within an organization".^[18] For more industry specific guidance, e.g., financial institutions, Canada's E-13 Regulatory Compliance Management provides specific compliance risk management tactics.^[19]

The financial sector in the Netherlands is heavily regulated. The Dutch Central Bank (De Nederlandsche Bank N.V.) is the prudential regulator while the Netherlands Authority for Financial Markets (AFM) is the regulator for behavioral supervision of financial institutions and markets. A common definition of compliance is:'Observance of external (international and national) laws and regulations, as well as internal norms and procedures, to protect the integrity of the organization, its management and employees with the aim of preventing and controlling risks and the possible damage resulting from these compliance and integrity risks'.^[20]

In India, compliance regulation takes place across three strata: Central, State, and Local regulation. India veers towards central regulation, especially of financial organizations and foreign funds. Compliance regulations vary based on the industry segment in addition to the geographical mix. Most regulation comes in the following broad categories: economic regulation, regulation in the public interest, and environmental regulation.^[21] India has also been characterized by poor compliance - reports suggest that only around 65% of companies are fully compliant to norms.^[22]

The Monetary Authority of Singapore is Singapore's central bank and financial regulatory authority. It administers the various statutes pertaining to money, banking, insurance, securities and the financial sector in general, as well as currency issuance.^[23]

There is considerable regulation in the United Kingdom, some of which is derived from European Union legislation. Various areas are policed by different bodies, such as the Financial Conduct Authority (FCA),^[24] Environment Agency,^[25] Scottish Environment Protection Agency,^[26] Information Commissioner's Office,^[27] Care Quality Commission,^[28] and others: see List of regulators in the United Kingdom.

Important compliance issues for all organizations large and small include the Data Protection Act 2018^[29] and, for the public sector, Freedom of Information Act 2000.^[30]

The U.K. Corporate Governance Code (formerly the Combined Code) is issued by the Financial Reporting Council (FRC) and "sets standards of good practice in relation to board leadership and effectiveness, remuneration, accountability, and relations with shareholders".^[31] All companies with a Premium Listing of equity shares in the U.K. are required under the Listing Rules to report on how they have applied the Combined Code in their annual report and accounts.^[32] (The Codes are therefore most similar to the U.S.' Sarbanes–Oxley Act.)

The U.K.'s regulatory framework requires that all its publicly listed companies should provide specific content in the core financial statements that must appear in a yearly report, including balance sheet, comprehensive income statement, and statement of changes in equity, as well as cash flow statement as required under international accounting standards.^[33] It further demonstrates the relationship that subsists among shareholders, management, and the independent audit teams. Financial statements must be prepared using a particular set of rules and regulations hence the rationale behind allowing the companies to apply the provisions of company law, international financial reporting standards (IFRS), as well as the U.K. stock exchange rules as directed by the FCA.^[34] It is also possible that shareholders may not understand the figures as presented in the various financial statements, hence it is critical that the board should provide notes on accounting policies as well as other explanatory notes to help them understand the report better.

Data retention is a part of regulatory compliance that is proving to be a challenge in many instances. The security that comes from compliance with industry regulations can seem contrary to maintaining user privacy. Data retention laws and regulations ask data owners and other service providers to retain extensive records of user activity beyond the time necessary for normal business operations. These requirements have been called into question by privacy rights advocates.^[35]

Compliance in this area is becoming very difficult. Laws like the CAN-SPAM Act and Fair Credit Reporting Act in the U.S. require that businesses give people the right to be forgotten.^[36][37] In other words, they must remove individuals from marketing lists if it is requested, tell them when and why they might share personal information with a third party, or at least ask permission before sharing that data. Now, with new laws coming out that demand longer data retention despite the individual’s desires, it can create some real difficulties.

Money laundering and terrorist financing pose significant threats to the integrity of the financial system and national security. To combat these threats, the EU has adopted a risk-based approach to Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) that relies on cooperation and coordination between EU and national authorities. In this context, risk-based regulation refers to the approach of identifying and assessing potential risks of money laundering and terrorist financing and implementing regulatory measures proportional to those risks. However, the shared enforcement powers between EU and national authorities in the implementation and enforcement of AML/CFT regulations can create legal implications and challenges. The potential for inconsistent application of AML regulations across different jurisdictions can create regulatory arbitrage and undermine the effectiveness of AML efforts. Additionally, a lack of clear and consistent legal frameworks defining the roles and responsibilities of EU and national authorities in AML enforcement can lead to situations where accountability is difficult to establish.

Corporate scandals and breakdowns such as the Enron case of reputational risk in 2001 have increased calls for stronger compliance and regulations, particularly for publicly listed companies.^[1] The most significant recent statutory changes in this context have been the Sarbanes–Oxley Act developed by two U.S. congressmen, Senator Paul Sarbanes and Representative Michael Oxley in 2002 which defined significantly tighter personal responsibility of corporate top management for the accuracy of reported financial statements; and the Dodd-Frank Wall Street Reform and Consumer Protection Act.

The Office of Foreign Assets Control (OFAC) is an agency of the United States Department of the Treasury under the auspices of the Under Secretary of the Treasury for Terrorism and Financial Intelligence. OFAC administers and enforces economic and trade sanctions based on U.S. foreign policy and national security goals against targeted foreign states, organizations, and individuals.

Compliance in the U.S. generally means compliance with laws and regulations. These laws and regulations can have criminal or civil penalties. The definition of what constitutes an effective compliance plan has been elusive. Most authors, however, continue to cite the guidance provided by the United States Sentencing Commission in Chapter 8 of the Federal Sentencing Guidelines.^[38][39]

On October 12, 2006, the U.S. Small Business Administration re-launched Business.gov (later Business.USA.gov and finally SBA.Gov)^[40] which provides a single point of access to government services and information that help businesses comply with government regulations.

The U.S. Department of Labor, Occupational Health and Safety Administration (OSHA) was created by Congress to assure safe and healthful working conditions for working men and women by setting and enforcing standards and by providing training, outreach, education, and assistance. OSHA implements laws and regulations regularly in the following areas, construction, maritime, agriculture, and recordkeeping.^[41]

The United States Department of Transportation also has various laws and regulations requiring that prime contractors when bidding on federally funded projects engage in good faith effort compliance, meaning they must document their outreach to certified disadvantaged business enterprises.^[42]

Wikimedia Commons has media related to Regulatory compliance.

• Business Motivation Model - A standard for recording governance and compliance activities
• Chief compliance officer
• Corporate social responsibility
• Environmental compliance
• Governance, risk management, and compliance
• International regulation
• Professional ethics
• Regulatory technology

Part of a series on
Accounting
Constant purchasing power Historical cost Management Tax
Major types Audit Budget Cost Forensic Financial Fund Governmental Management Social Tax
Key concepts Accounting period Accrual Constant purchasing power Economic entity Fair value Going concern Historical cost Matching principle Materiality Revenue recognition Unit of account
Selected accounts Assets Cash Cost of goods sold Depreciation / Amortization (business) Equity Expenses Goodwill Liabilities Profit Revenue
Accounting standards Generally-accepted principles Generally-accepted auditing standards Convergence International Financial Reporting Standards International Standards on Auditing Management Accounting Principles
Financial statements Annual report Balance sheet Cash-flow Equity Income Management discussion Notes to the financial statements
Bookkeeping Bank reconciliation Debits and credits Double-entry system FIFO and LIFO Journal Ledger / General ledger Trial balance
Auditing Financial Internal Firms Report Sarbanes–Oxley Act
People and organizations Accountants Accounting organizations Luca Pacioli
Development History Research Positive accounting Sarbanes–Oxley Act
Misconduct Creative Earnings management Error account Hollywood Off-balance-sheet Two sets of books

Financial statement analysis (or just financial analysis) is the process of reviewing and analyzing a company's financial statements to make better economic decisions to earn income in future. These statements include the income statement, balance sheet, statement of cash flows, notes to accounts and a statement of changes in equity (if applicable). Financial statement analysis is a method or process involving specific techniques for evaluating risks, performance, valuation, financial health, and future prospects of an organization.^[1]

It is used by a variety of stakeholders, such as credit and equity investors, the government, the public, and decision-makers within the organization. These stakeholders have different interests and apply a variety of different techniques to meet their needs. For example, equity investors are interested in the long-term earnings power of the organization and perhaps the sustainability and growth of dividend payments. Creditors want to ensure the interest and principal is paid on the organizations debt securities (e.g., bonds) when due.

Common methods of financial statement analysis include horizontal and vertical analysis and the use of financial ratios. Historical information combined with a series of assumptions and adjustments to the financial information may be used to project future performance. The Chartered Financial Analyst designation is available for professional financial analysts.

Benjamin Graham and David Dodd first published their influential book "Security Analysis" in 1934.^{[2] [3]} A central premise of their book is that the market's pricing mechanism for financial securities such as stocks and bonds is based upon faulty and irrational analytical processes performed by many market participants. This results in the market price of a security only occasionally coinciding with the intrinsic value around which the price tends to fluctuate.^[4] Investor Warren Buffett is a well-known supporter of Graham and Dodd's philosophy.

The Graham and Dodd approach is referred to as Fundamental analysis and includes: 1) Economic analysis; 2) Industry analysis; and 3) Company analysis. The latter is the primary realm of financial statement analysis. On the basis of these three analyses the intrinsic value of the security is determined.^[4]

Horizontal analysis compares financial information over time, typically from past quarters or years. Horizontal analysis is performed by comparing financial data from a past statement, such as the income statement. When comparing this past information one will want to look for variations such as higher or lower earnings.^[5]

Vertical analysis is a percentage analysis of financial statements. Each line item listed in the financial statement is listed as the percentage of another line item. For example, on an income statement each line item will be listed as a percentage of gross sales. This technique is also referred to as normalization^[6] or common-sizing.^[5]

Financial ratios are very powerful tools to perform some quick analysis of financial statements. There are four main categories of ratios: liquidity ratios, profitability ratios, activity ratios and leverage ratios. These are typically analyzed over time and across competitors in an industry.

• Liquidity ratios are used to determine how quickly a company can turn its assets into cash if it experiences financial difficulties or bankruptcy. It essentially is a measure of a company's ability to remain in business. A few common liquidity ratios are the current ratio and the liquidity index. The current ratio is current assets/current liabilities and measures how much liquidity is available to pay for liabilities. The liquidity index shows how quickly a company can turn assets into cash and is calculated by: (Trade receivables x Days to liquidate) + (Inventory x Days to liquidate)/Trade Receivables + Inventory.
• Profitability ratios are ratios that demonstrate how profitable a company is. A few popular profitability ratios are the breakeven point and gross profit ratio. The breakeven point calculates how much cash a company must generate to break even with their start up costs. The gross profit ratio is equal to gross profit/revenue. This ratio shows a quick snapshot of expected revenue.
• Activity ratios are meant to show how well management is managing the company's resources. Two common activity ratios are accounts payable turnover and accounts receivable turnover. These ratios demonstrate how long it takes for a company to pay off its accounts payable and how long it takes for a company to receive payments, respectively.
• Leverage ratios depict how much a company relies upon its debt to fund operations. A very common leverage ratio used for financial statement analysis is the debt-to-equity ratio. This ratio shows the extent to which management is willing to use debt in order to fund operations. This ratio is calculated as: (Long-term debt + Short-term debt + Leases)/ Equity.^[7]

DuPont analysis uses several financial ratios that multiplied together equal return on equity, a measure of how much income the firm earns divided by the amount of funds invested (equity).

A Dividend discount model (DDM) may also be used to value a company's stock price based on the theory that its stock is worth the sum of all of its future dividend payments, discounted back to their present value.^[8] In other words, it is used to value stocks based on the net present value of the future dividends.

Financial statement analyses are typically performed in spreadsheet software — or specialized accounting software — and summarized in a variety of formats.

An earnings recast is the act of amending and re-releasing a previously released earnings statement, with specified intent.^[9]

Investors need to understand the ability of the company to generate profit. This, together with its rate of profit growth, relative to the amount of capital deployed and various other financial ratios, forms an important part of their analysis of the value of the company. Analysts may modify ("recast") the financial statements by adjusting the underlying assumptions to aid in this computation. For example, operating leases (treated like a rental transaction) may be recast as capital leases (indicating ownership), adding assets and liabilities to the balance sheet. This affects the financial statement ratios.^[10]

Recasting is also known as normalizing accounts.^[11]

Financial analysts typically have finance and accounting education at the undergraduate or graduate level. Persons may earn the Chartered Financial Analyst (CFA) designation through a series of challenging examinations. Upon completion of the three-part exam, CFAs are considered experts in areas like fundamentals of investing, the valuation of assets, portfolio management, and wealth planning.

• Business valuation
• Financial audit
• Financial statement
• DuPont analysis
• Data analysis

• Investopedia
• Beginner's Guide to Financial Statements by SEC.gov

• SFAF - French Society of Financial Analysts
• ACIIA - Association of Certified International Investment Analysts
• EFFAS - European Federation of Financial Analysts Societies