10-K/A: Empire State Realty OP, L.P. Amends 2023 Annual Report Due to Material Weakness in IT Controls

Empire State Realty OP, L.P. has filed an amendment to its 2023 annual report to address a material weakness identified in its information technology general controls.

Summary

• Empire State Realty OP, L.P. filed an amendment to its original 2023 annual report on Form 10-K to address a material weakness in internal control over financial reporting.
• The material weakness was identified by Ernst & Young (EY) during a post-audit quality review, revealing deficiencies in the design of certain information technology general controls (ITGCs).
• Specifically, the issues were related to controls for approving and monitoring changes within information systems and user access to these systems.
• Management concluded that these ITGC deficiencies resulted in ineffective business process controls that rely on data from the impacted systems.
• Despite the material weakness, management has concluded that the consolidated financial statements fairly present the company's financial condition, results of operations, and cash flows.
• The company is implementing a remediation plan to address the ITGC deficiencies, including enhancing change monitoring controls, managing user access permissions, and increasing the frequency of user access reviews.

Sentiment

Score: 4

Explanation: The sentiment is negative due to the identification of a material weakness in internal controls and the adverse opinion from the auditor. However, the company is taking steps to remediate the issues, which provides some positive outlook.

Positives

• The company's consolidated financial statements are deemed to fairly present its financial position despite the identified material weakness.
• Management has developed a remediation plan to address the identified IT control deficiencies.
• The company is taking steps to enhance its IT controls and improve its financial reporting processes.

Negatives

• A material weakness in internal control over financial reporting was identified.
• Disclosure controls were deemed not effective at a reasonable level of assurance.
• The company received an adverse opinion from EY on the effectiveness of its internal control over financial reporting for the period ended December 31, 2023.

Risks

• The material weakness in ITGCs could potentially lead to misstatements in the company's financial statements if not remediated effectively.
• The remediation plan may not be fully effective until the applicable controls are fully implemented and operated for a sufficient period of time.
• There is a risk that internal controls may become inadequate due to changes in business conditions.

Future Outlook

The company will continue to monitor the design and effectiveness of its internal controls and will make further changes as deemed appropriate by management. The company will not be able to conclude that it has completely remediated the material weakness until the applicable controls are fully implemented and operated for a sufficient period of time and management has concluded, through formal testing, that the remediated controls are operating effectively.

Management Comments

• Management concluded that a material weakness in the design of ITGCs related to IT systems and applications relevant to preparation of our financial statements existed as of December 31, 2023.
• Management has concluded that our consolidated financial statements and related notes thereto included in the Original Form 10-K fairly present in all material respects the financial condition, results of operations and cash flows of the Company as of, and for, the periods presented in this report.

Industry Context

This announcement highlights the importance of robust IT controls in financial reporting, a key concern for all public companies, especially those with complex operations and significant IT infrastructure. The need for strong ITGCs is a common theme in regulatory scrutiny and audit findings.

Comparison to Industry Standards

• The identification of a material weakness in IT controls is not uncommon, but it does highlight a need for improvement in the company's internal control framework.
• Other REITs and real estate companies often face similar challenges in maintaining effective IT controls, especially with the increasing reliance on technology for financial reporting.
• Companies like Boston Properties (BXP) and Vornado Realty Trust (VNO) also operate large real estate portfolios and face similar challenges in maintaining robust internal controls.
• The remediation plan outlined by Empire State Realty OP, L.P. is consistent with industry best practices for addressing IT control deficiencies, including enhancing monitoring controls and user access management.

Stakeholder Impact

• Shareholders may be concerned about the material weakness in internal controls and its potential impact on financial reporting.
• Employees involved in financial reporting will need to be trained on the new ITGCs.
• Creditors may scrutinize the company's financial statements more closely due to the identified weakness.

Next Steps

• The company will implement changes associated with the design, implementation and monitoring of ITGCs.
• The company will continue to monitor the design and effectiveness of these and other processes, procedures, and controls.
• Management will conduct formal testing to ensure the remediated controls are operating effectively.

Key Dates

Keywords

material weakness, internal control, ITGC, financial reporting, disclosure controls, remediation, information technology, audit, Ernst & Young, SOX, Sarbanes-Oxley