2 unchanged sentences
We maintain disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended, (the “Exchange Act”) that are designed to provide reasonable assurance that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and to ensure that information required to be disclosed is accumulated and communicated to our management, including our Principal Executive Officer and Principal Financial Officer, as appropriate, to allow for timely decisions regarding required disclosure.
−Removed: Our management, with the participation of our Principal Executive Officer and Principal Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of March 31, 2024, the end of the period covered by this Quarterly Report.
−Removed: Based on this evaluation, our Principal Executive Officer and Principal Financial Officer concluded that our disclosure controls and procedures were not effective as of March 31, 2024, due to the material weaknesses in our internal control over financial reporting, described below.
+Added: Our management, with the participation of our Principal Executive Officer and Principal Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of June 30, 2024, the end of the period covered by this Quarterly Report on Form 10-Q.
+Added: Based on this evaluation, our Principal Executive Officer and Principal Financial Officer concluded that our disclosure controls and procedures were not effective as of June 30, 2024, due to the material weaknesses in our internal control over financial reporting, described below.
However, after giving full consideration to the material weaknesses, management believes that our condensed consolidated financial statements included in this Quarterly Report on Form 10-Q have been prepared in accordance with U.S.
2 unchanged sentences
A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim consolidated financial statements will not be prevented or detected on a timely basis.
−Removed: We have identified the following material weaknesses in our internal control over financial reporting, which remain outstanding as of March 31, 2024.
+Added: We have identified the following material weaknesses in our internal control over financial reporting, which remain outstanding as of June 30, 2024.
Westrock did not design and maintain effective controls in response to the risks of material misstatement as changes to existing controls or the implementation of new controls were not sufficient to respond to changes to the risks of material misstatement to financial reporting.
This material weakness in risk assessment contributed to the following material weaknesses:
−Removed: ● Westrock did not design and maintain effective controls over the period-end financial reporting process to achieve complete and accurate financial accounting, reporting and disclosures, including the presentation and classification of various accounts and the recognition of operating lease right-of-use assets and operating lease liabilities in the consolidated financial statements, which resulted in immaterial adjustments to certain interim and annual periods for the years ending December 31, 2020 through December 31, 2023, and material adjustments to the cash flow presentation of net repayments from repurchase agreements within financing activities within the condensed consolidated statement of cash flows for the six months ended June 30, 2023
−Removed: and to operating lease right-of-use assets and operating lease liabilities within the consolidated balance sheet as of December 31, 2023.
+Added: ● Westrock did not design and maintain effective controls over the period-end financial reporting process to achieve complete and accurate financial accounting, reporting and disclosures, including the presentation and classification of various accounts and the recognition of operating lease right-of-use assets and operating lease liabilities in the consolidated financial statements, which resulted in immaterial adjustments to certain interim and annual periods for the years ending December 31, 2020 through March 31, 2024, and material adjustments to the cash flow presentation of net repayments from repurchase agreements within financing activities within the condensed consolidated statement of cash flows for the six months ended June 30, 2023 and to operating lease right-of-use assets and operating lease liabilities within the consolidated balance sheet as of December 31, 2023.
● Westrock did not design and maintain effective controls related to ensuring appropriate segregation of duties as it relates to the preparation and review of journal entries and account reconciliations, which did not result in adjustments to the consolidated financial statements.
7 unchanged sentences
● Designed and implemented controls during the quarters ended June 30, September 30, and December 31, 2023, to formalize roles and review responsibilities to align with Westrock’s team’s skills and experience and designing and implementing controls over segregation of duties that include documentation, task reassignment, and policies and procedures enhancement around the preparation, review and oversight of account reconciliations and journal entries.
−Removed: ● Designed and implemented formal accounting procedures and controls during the quarters ended September 30, 2023 December 31, 2023, and March 31, 2024 that support Westrock’s period-end financial accounting, reporting and disclosures, including controls over close procedures workflow, preparation, review and oversight of account reconciliations and journal entries, presentation and classification, evaluation of internal information for disclosure, recognition of operating lease right-of-use assets and operating lease liabilities, and controls to reconcile financial statement and disclosure information to source documentation.
+Added: ● Designed and implemented formal accounting procedures and controls during the quarters ended September 30, 2023, December 31, 2023, March 31, 2024 and June 30, 2024 that support Westrock’s period-end financial accounting, reporting and disclosures, including controls over close procedures workflow, preparation, review and oversight of account reconciliations and journal entries, presentation and classification, evaluation of internal information for disclosure, recognition of operating lease right-of-use assets and operating lease liabilities, and controls to reconcile financial statement and disclosure information to source documentation.
The enhancements are expected to remediate the material weaknesses when they have operated effectively for a sufficient period of time.
−Removed: Remediation of Material Weakness in Internal Control Over Financial Reporting
−Removed: As previously disclosed, Westrock did not design and maintain effective controls over certain IT or general computer controls for information systems that are relevant to the preparation of the consolidated financial statements.
−Removed: Specifically, Westrock did not design and maintain:
−Removed: (i) program change management controls to ensure that IT program and data changes affecting financial IT applications and underlying accounting records are identified, tested, authorized and implemented appropriately;
−Removed: (ii) user access controls to ensure appropriate segregation of duties and adequate restricted user and privileged access to financial applications, data and programs to the appropriate personnel;
−Removed: (iii) computer operations controls to ensure that data backups are authorized and monitored;
−Removed: and (iv) testing and approval controls for program development to ensure that new software development is aligned with business and IT requirements.
−Removed: To remediate the material weakness, management has taken certain measures including the following:
−Removed: ● Hired additional accounting and IT personnel, including a new chief accounting officer hired in May 2021, a new IT compliance resource hired in March 2023, a new internal controls resource hired in April 2023 with the appropriate level of knowledge, training, and experience to establish an internal audit function responsible for testing internal controls to improve our internal control over financial reporting and IT capabilities, and a Chief Information Officer in November 2023 with public company IT compliance and cybersecurity experience.
−Removed: ● Engaged a third party to assist in designing and implementing controls related to IT general controls (ITGC).
−Removed: ● During the quarter ended September 30, 2023, enhanced policies and procedures related to the management and approval of (i) changes in our IT environment, including procedures to review changes in IT data and the configuration of systems, (ii) system implementations and projects to ensure adequate governance, development, change management, and implementation controls, (iii) security access, including policies and procedures to set up or remove users to our IT systems, (iv) periodic security access reviews of our key financial systems’ users to ensure the appropriateness of their roles and security access levels, (v) backup processes including access to backups, monitoring, scheduling, recovery, and testing, and (vi) review of service organization reports and related end-user control considerations .
−Removed: ● Over the course of the quarter ended December 31, 2023, management provided training to control owners and revised certain control documentation to emphasize evidence retention in the execution of key IT controls.
−Removed: ● Designed and implemented IT general controls, including controls over program change management, the review and update of user access rights and privileges, controls over batch jobs and data backups, and program development approvals and testing for all IT systems during the quarters ended September 30, and December 31, 2023.
−Removed: ● During the quarter ending December 31, 2023, designed and implemented a third-party service provider assurance report review control which includes management’s overall evaluation of the report and bridge letters as applicable, a response to the deficiencies noted, a mapping of complimentary user entity controls to the company’s controls, and an evaluation of relevant sub-service providers.
−Removed: During the fourth quarter of 2023 and first quarter of 2024, management completed the testing necessary to conclude that the newly implemented and enhanced controls were appropriately designed, implemented and operating effectively as of March 31, 2024, and concluded that the material weakness related to IT general computer controls has been remediated.
Changes in Internal Control Over Financial Reporting
−Removed: T here were no changes in our internal control over financial reporting, as such term is defined in Rule 13a-15(f) under the Exchange Act, that occurred during the quarter ended March 31, 2024, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting .
+Added: T here were no changes in our internal control over financial reporting, as such term is defined in Rule 13a-15(f) under the Exchange Act, that occurred during the quarter ended June 30, 2024, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting .
Other Information
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.