Auditen
action postmortem

Why Do We Still Trust 20-Fs?

PLDT Inc. is currently cleaning up a mess that should've been caught in the design phase, not after the ink dried on their 20-F filing. When you see a company forced to amend its primary annual report because of material control weaknesses—and worse, when auditors pull their opinions entirely—you aren't looking at a "glitch." You're looking at a systemic collapse of internal controls over financial reporting (ICFR).

I saw this same movie back in 2004. Companies were terrified of Section 404 and spent millions building "control frameworks" that were essentially just fancy folders full of policies nobody read. They focused on the theater of compliance rather than the reality of the transaction. PLDT has fallen into the same trap.

The organization got the basics wrong: they trusted a process that existed on paper but failed in practice. When an auditor withdraws an opinion, it's the nuclear option. It means the auditors realized they were relying on data that was either falsified or fundamentally unsupported by evidence. They didn't just find a mistake; they found that the mechanism meant to prevent mistakes was a ghost.

The control should have been a hard-stop verification gate. Not a sign-off from a manager who is also the one pushing the entries, and not a quarterly review that happens three weeks after the quarter closes. A functional control requires an independent validation of the source data before it ever hits the ledger. If you can't prove where the number came from without a frantic scramble through emails, you don't have a control. You have hope.

Some will argue that material weaknesses are common in large conglomerates with complex legacy systems. That's a lazy excuse. Complexity doesn't excuse a lack of integrity in the reporting line. If the system is too complex to control, then the system is broken. Period.

Now, let's talk about what this costs at year-end.

The direct cost isn't just the legal fees for amending the filing. It's the "remediation tax." Every hour an auditor spends digging through a mess they already signed off on is an hour billed at premium rates. PLDT will likely see their audit fees jump north of 30% next cycle because the auditors now view them as high-risk. Then there's the market cap hit when investors realize the financial statements were basically fiction.

The second-order effect here is where it gets interesting for the rest of us. This doesn't just burn PLDT; it puts their auditors in the crosshairs of the PCAOB. When a firm pulls an opinion, they're admitting they failed to exercise professional skepticism the first time around. I expect a surge in auditor quality reviews across the sector as regulators ask why these weaknesses weren't flagged months earlier.

The real question is: how many other firms are sitting on "certified" financials that would evaporate if a single auditor decided to actually test the source data?

I'll believe the remediation is working when I see them fire the people who signed off on the original, flawed design. Until then, it's just more theater.

Sources

The reporting this piece was written from. Check the originals before relying on anything here.

  1. PLDT Inc. (PHI) to amend 2025 Form 20-F after material control weakness and pulled audit opinions - Stock Titan PCAOB
  2. SEC charges former execs of auto subprime lender giant Tricolor with fraud, falsifying loan documents - Compliance Week Compliance Week (Google News)
  3. tl;dv Leaked 181,874 Meeting Records: SOC 2 and the Vendor Problem - Machine Brief InfoSec Compliance (Google News)
  4. SEC lays groundwork for crypto issuers to raise flexible capital with new rules proposal - | Governance Intelligence Compliance Week (Google News)
  5. Medusa Ransomware Group Has Attacked 500+ Critical Infrastructure Orgs - The HIPAA Journal InfoSec Compliance (Google News)
  6. Nasdaq warns SAGTEC Global (Nasdaq: SAGT) over sub-$1 shares, with delisting risk - Stock Titan Compliance Week (Google News)
  7. Utah governor says he’s ‘deeply troubled’ by Flock cameras, calls for review to protect privacy - Utah News Dispatch Data Privacy (Google News)
  8. EHang (EH) replaces PwC as 2026 auditor, names new audit firm - Stock Titan Compliance Week (Google News)

How stories are selected and assessed