What changed in this filing

/stocks — the workspaceLOADING

Item 4. Controls and Procedures

2022-05-09 compared with 2021-11-05 · 29 added, 31 removed, 32 unchanged (65% of the section changed)

4 unchanged sentences

Evaluation of Disclosure Controls and Procedures

In connection with the preparation of this Form 10-Q, pursuant to Rule 13a-15(b) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), the Company carried out an evaluation with the participation of its management, including its Chief Executive Officer (principal executive officer) and Chief Financial Officer (principal financial officer), of the effectiveness of disclosure controls and procedures (as defined under Rule 13a-15(e) and 15d-15(e) under the Exchange Act) as of September 30, 2021.

Based on this evaluation, the Company’s Chief Executive Officer and Chief Financial Officer concluded that, because of the material weaknesses in internal control over financial reporting discussed below, the Company’s disclosure controls and procedures were not effective as of September 30, 2021, to ensure:

In connection with the preparation of this Form 10-Q, pursuant to Rule 13a-15(b) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), the Company carried out an evaluation with the participation of its management, including its Chief Executive Officer (principal executive officer) and Chief Financial Officer (principal financial officer), of the effectiveness of the design and operation of our disclosure controls and procedures (as defined under Rule 13a-15(e) and 15d-15(e) under the Exchange Act) as of March 31, 2022.

(i) that information required to be disclosed by the Company in the reports that it files or submits under the Exchange Act, is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms, and (ii) that such information is accumulated and communicated to management, including the Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure.

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act.

The Company’s internal control over financial reporting is a process designed by or under the supervision of the Company’s Chief Executive Officer and Chief Financial Officer, and overseen by the Board of Directors, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of published financial statements for external purposes in accordance with GAAP and includes policies and procedures that:

reporting and the preparation of financial statements for external purposes in accordance with GAAP and includes policies and procedures that:

• Pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the Company’s assets;

• Provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with GAAP, and that the Company’s receipts and expenditures are being made only in accordance with the authorization of its management and directors;

• Provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of the Company’s assets that could have a material effect on the consolidated financial statements.

Because of its inherent limitations, internal control over financial reporting is not intended to provide absolute assurance that a misstatement of the Company’s consolidated financial statements would be prevented or detected.

6 unchanged sentences

• Risk Assessment:

The Company did not have an effective risk assessment process that defined clear financial reporting objectives and evaluated risks, including fraud risks, and risks resulting from changes in the external environment and business operations, at a sufficient level of detail to identify all relevant risks of material misstatement across the entity.

The Company did not have an effective risk assessment process to identify and evaluate at a sufficient level of detail all relevant risks of material misstatement, including fraud risks.

• Information and Communication:

3 unchanged sentences

• Control Activities:

As a consequence of the material weaknesses described above, internal control deficiencies related to the design and operation of process-level controls and general information technology controls were determined to be pervasive throughout the Company’s financial reporting processes.

While these material weaknesses did not result in material misstatements of the Company’s financial statements as of and for the year ended December 31, 2020, these material weaknesses create a reasonable possibility that a material misstatement of account balances or disclosures in annual or interim consolidated financial statements may not be prevented or detected in a timely manner.

While these material weaknesses did not result in material misstatements of the Company’s consolidated financial statements as of and for the year ended December 31, 2021, these material weaknesses create a reasonable possibility that a material misstatement of account balances or disclosures in annual or interim consolidated financial statements may not be prevented or detected in a timely manner.

Accordingly, the Company concluded that the deficiencies represent material weaknesses in its internal control over financial reporting and its internal control over financial reporting was not effective as of December 31, 2021.

3 unchanged sentences

The Company’s remediation plan was designed with the assistance of management’s outside consultant, an internationally recognized accounting firm.

The Company continues to work with its outside consultant to assist in completing the remediation plan and believes that its remediation plan will be sufficient to remediate the identified material weaknesses and strengthen its internal control over financial reporting.

As the Company continues to evaluate, and works to improve, its internal control over financial reporting, management may determine that additional measures to address control deficiencies or modifications to the remediation plan are necessary.

To date, the Company has accomplished or made substantial progress towards the following remediation steps:

Identified material processes and significant locations for the purpose of identifying risks of material misstatement to the Company’s financial statements.

Documented significant elements of a comprehensive risk assessment and internal control gap analysis and commenced the validation thereof with key stakeholders.

Conducted company-wide interviews to ensure an understanding of the activities involved in the recording of transactions within material processes throughout the Company.

Completed a comprehensive review and update, as necessary, of the documentation of relevant processes, policies and procedures, and design of over 350 relevant controls across the organization with respect to the Company’s internal control over financial reporting, inclusive of relevant business process and information technology controls.

With assistance from management’s outside consultant, the Company is in the process of implementation of new or redesigned internal controls, including ensuring that sufficient documentation will be available to evidence the performance of the such internal controls.

Evaluated components of the Company’s internal control under the 2013 COSO Framework to ensure that controls are present, functioning and able to be appropriately evidenced.

Pursuant to this evaluation process, the Company is in the process of implementing enhanced controls pertaining to the conduct of management’s evaluation of internal controls over financial reporting.

With the assistance of management’s outside consultant and the newly created Tredegar internal control compliance office, the Company continues to conduct additional training with the individual control owners across the organization with respect to the operation of the new and redesigned controls and documentation necessary to evidence their implementation and effective operation.

Additionally, the Company continues to recruit, hire, train and retain additional skilled and experienced management personnel to fill additional roles across the organization.

To date, the Company has hired additional finance controllers for its Aluminum Extrusions business, created an assistant controller’s position at Tredegar corporate headquarters, and, reallocated roles and responsibilities of the Company’s accounting personnel, that previously supported a significant divested business, to further support its remediation objectives and ongoing operations.

The Company has also created a Sarbanes-Oxley Act of 2002 compliance group charged with monitoring the control environment and has also increased resources within its internal audit function.

The Company’s remediation efforts are ongoing, and the Company will continue its initiatives to implement and document policies and procedures and strengthen the Company’s internal control environment.

Remediation of the identified material weaknesses and strengthening the Company’s internal control environment has required a substantial effort since 2018, and those efforts have continued in 2021.

The Company previously expected the implementation of the Company’s new and revised controls to begin in the second half of 2021, with the testing of such controls to continue through the filing of the 2021 Annual Report on Form 10-K.

However, during the preparation of the Company’s financial statements for the third quarter of 2021, the Company observed that its remediation efforts have been temporarily impacted due to factors including, but not limited to, the COVID-19 pandemic, the need for additional training and turnover in positions relevant to internal controls.

As a result, the Company has concluded that remediation of the identified material weaknesses will not be completed in 2021 and more time is necessary to permit the new and redesigned controls to be implemented and operate effectively, including allowing for additional time to train control owners as part of the successful implementation of the revised system of internal controls over financial reporting.

The Company expects to complete the implementation of the new and revised controls in the first half 2022.

In the first quarter of 2022, the Company began to implement new and revised internal controls over financial reporting designed as part of management’s remediation plan across the organization.

The Company continues to work with its outside consultant to assist

in completing the remaining steps in the remediation plan and believes that its remediation plan will be sufficient to remediate the identified material weaknesses and strengthen its internal control over financial reporting.

As the Company continues to evaluate, implement and works to improve, its internal control over financial reporting, management may determine that additional measures to address control deficiencies or modifications to the remediation plan are necessary.

Through the first quarter of 2022, the Company has completed certain steps in its remediation plan, including:

• for certain processes, developed new and revised existing process narratives and identified risks of material misstatement inherent to those processes;

• developed new controls and revised the design of existing controls for a significant number of relevant key controls to mitigate the aforementioned risks, inclusive of general information technology controls and entity-level controls;

• conducted initial organization-wide training sessions with all control owners;

• increased resources in the Company’s internal audit function and created and staffed a controls compliance group charged with monitoring and facilitating compliance with the Company’s responsibilities under the Sarbanes Oxley Act of 2002 (“SOX”);

• implemented a software solution to assist in monitoring and documenting compliance with SOX;

• migrated certain components of a legacy information technology system onto a common information technology environment;

• implemented new and revised internal controls over financial reporting for certain processes and information technology environments.

The following remaining activities are scheduled for completion in the first half of 2022 in anticipation of conducting management’s testing that will begin in the first half of 2022 in support of issuing management’s assessment of internal control over financial reporting as of December 31, 2022:

• completion of the identification of risks arising from inappropriate segregation of duties and fraud risks;

• completion of risk assessment and control design for the remaining populations of processes and controls;

• implementation of controls across the remaining processes and information technology environments;

• ongoing training with control owners, as necessary.

The Company continues to monitor the impact of employee turnover, the COVID-19 pandemic and other external factors on its remediation plan and its assessment of internal control over financial reporting.

The material weaknesses cannot be considered remediated until the applicable controls have operated for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively.

The Company cannot assure you when it will remediate such weaknesses, nor can it be certain whether additional actions will be required or the costs of any such actions.

The Company cannot assure you when it will remediate the identified material weaknesses, nor can it be certain whether additional actions will be required.

Moreover, the Company cannot assure you that additional material weaknesses will not arise in the future.

Changes in Internal Control Over Financial Reporting

The Company is in the process of implementing certain changes in its internal controls to remediate the material weaknesses as described above.

The implementation of the material aspects of this plan began in the second quarter of 2019.

Except as noted above with respect to the implementation of the remediation plan, there has been no change in the Company’s internal control over financial reporting during the quarter ended September 30, 2021, that has materially affected, or is reasonably likely to materially affect, its internal control over financial reporting.

The Company is in the process of making certain changes in its internal controls to remediate the material weaknesses as described above.

The execution of the material aspects of this remediation plan began in the second quarter of 2019.

Except as noted above with respect to the completion of certain steps in the remediation plan and implementation of certain new and revised internal controls over financial reporting, there has been no change in the Company’s internal control over financial reporting during the quarter ended March 31, 2022, that has materially affected, or is reasonably likely to materially affect, its internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act).

PART II - OTHER INFORMATION

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-Q

Item 4. Controls and Procedures