10-K/A: Empire State Realty Trust Amends 2023 Annual Report Due to Material Weakness in IT Controls

Empire State Realty Trust has amended its 2023 annual report to address a material weakness identified in its information technology general controls, impacting financial reporting.

Summary

• Empire State Realty Trust (ESRT) has filed an amendment to its 2023 annual report on Form 10-K to address a material weakness in its internal control over financial reporting.
• The material weakness was identified by Ernst & Young (EY) during a post-audit quality review, which revealed deficiencies in the design of certain information technology general controls (ITGCs).
• Specifically, the issues were related to controls for approving and monitoring changes within information systems and user access to these systems.
• These control deficiencies impacted the effectiveness of business process controls that rely on the IT systems, leading to the conclusion that the company's disclosure controls were not effective at a reasonable level of assurance.
• Despite the material weakness, management has concluded that the consolidated financial statements fairly present the company's financial condition, results of operations, and cash flows.
• The company is implementing remediation plans to enhance ITGCs, including improving change monitoring, managing user access permissions, and increasing the frequency of user access reviews.
• EY has issued an adverse opinion on the effectiveness of the company's internal control over financial reporting as of December 31, 2023, due to the identified material weakness.

Sentiment

Score: 3

Explanation: The sentiment is negative due to the identification of a material weakness in internal controls and the adverse opinion from the auditor. While the company is taking steps to remediate the issue, the presence of such a weakness is a significant concern for investors.

Positives

• The company is actively addressing the identified material weakness by implementing a remediation plan.
• Management has concluded that the consolidated financial statements fairly present the company's financial condition, results of operations and cash flows despite the material weakness.
• The company has identified specific steps to enhance ITGCs, including improving change monitoring and user access controls.

Negatives

• A material weakness in internal control over financial reporting was identified, indicating a significant deficiency in the company's control environment.
• The company's disclosure controls were deemed ineffective at a reasonable level of assurance due to the material weakness.
• EY issued an adverse opinion on the effectiveness of the company's internal control over financial reporting for the year ended December 31, 2023.

Risks

• The material weakness in IT controls could potentially lead to misstatements in future financial reports if not fully remediated.
• The remediation plan is still in progress, and the company cannot yet conclude that the material weakness has been completely resolved.
• There is a risk that the implemented controls may not be effective or may become inadequate due to changes in business conditions.
• The adverse opinion from EY could negatively impact investor confidence.

Future Outlook

The company will continue to monitor the design and effectiveness of its internal controls and will make further changes as deemed appropriate by management. The company will not be able to conclude that the material weakness has been completely remediated until the applicable controls are fully implemented and operated for a sufficient period of time and management has concluded, through formal testing, that the remediated controls are operating effectively.

Management Comments

• Management has concluded that the consolidated financial statements fairly present the company's financial condition, results of operations and cash flows despite the material weakness.
• Management is in the process of implementing changes associated with the design, implementation and monitoring of ITGCs.
• Management believes that the actions being taken will remediate the material weakness identified.

Industry Context

The identification of a material weakness in internal controls is a significant issue for any public company, particularly a REIT, as it can impact investor confidence and the reliability of financial reporting. This situation highlights the importance of robust IT controls and ongoing monitoring in the real estate industry.

Comparison to Industry Standards

• The identification of a material weakness in internal controls is not uncommon, but it is a serious issue that requires prompt and effective remediation.
• Other REITs and public companies in general are expected to maintain effective internal controls over financial reporting, and a failure to do so can lead to regulatory scrutiny and reputational damage.
• Comparable companies are expected to have robust IT general controls, including change management and user access controls, to ensure the integrity of their financial data.
• The remediation plan outlined by ESRT is consistent with industry best practices for addressing IT control deficiencies.

Legal Proceedings

• The company is involved in ongoing litigation related to a prior arbitration award, which is currently under appeal in New York State court.

Related Party Transactions

• The company sold retail properties in Westport, Connecticut to an entity affiliated with the Chairman and CEO, Anthony E. Malkin, for $40 million.
• The transaction was reviewed and approved by the independent members of the Nominating and Corporate Governance Committee.

Stakeholder Impact

• Shareholders may be concerned about the material weakness in internal controls and the potential impact on the reliability of financial reporting.
• Employees may be affected by changes in IT systems and controls as part of the remediation plan.
• Customers and tenants may not be directly impacted by the control issues, but the company's overall stability and reputation could be affected.

Next Steps

• The company will continue to implement and monitor the remediation plan for the identified material weakness.
• Management will conduct formal testing to ensure the remediated controls are operating effectively.
• The company will continue to monitor the design and effectiveness of its internal controls and make further changes as deemed appropriate.

Key Dates

Keywords

material weakness, internal control, IT controls, financial reporting, disclosure controls, Sarbanes-Oxley Act, audit, remediation, information technology, Ernst & Young