The Securities and Exchange Commission enforces securities laws that protect investors. The SEC reported collecting $2.2 billion in penalties and damages for securities law violations in FY20. Some of that goes to the Investor Protection Fund—which rewards whistleblowers and supports investor education.
Each year, we audit and issue an opinion on the financial statements of the SEC and its Fund, and on the effectiveness of the SEC's internal controls (e.g., ability to ensure that transactions are properly authorized and recorded). In FY20, we found the statements were reliable and that the SEC's controls over financial reporting were effective.
The headquarters for the Securities and Exchange Commission
What GAO Found
Why GAO Did This Study
The Accountability of Tax Dollars Act of 2002 requires that SEC annually prepare and submit audited financial statements to Congress and the Office of Management and Budget. The Securities Exchange Act of 1934, as amended in 2010 by the Dodd-Frank Wall Street Reform and Consumer Protection Act (Dodd-Frank Act), requires SEC to annually prepare and submit a complete set of audited financial statements for its IPF to Congress. In accordance with the authority conferred in the Chief Financial Officers Act of 1990, as amended by the Government Management and Reform Act of 1994, GAO audited the SEC and IPF financial statements. Section 963 of the Dodd-Frank Act further requires that (1) SEC annually submit a report to Congress describing management's responsibility for internal control over financial reporting and assessing the effectiveness of such internal control during the fiscal year; (2) the SEC Chairman and Chief Financial Officer attest to SEC's report; and (3) GAO assess the effectiveness of SEC's internal control over financial reporting and evaluate, attest to, and report on SEC's assessment. Accordingly, this report also includes GAO's reporting in response to the requirement under the Dodd-Frank Act.
For more information, contact James R. Dalkin at (202) 512-3133 or firstname.lastname@example.org.