14/12/2025
SSM Compounds on Audit Qualifications: Heavy Enforcement at the Wrong Time
Many directors and small and medium enterprise (SME) owners were recently shocked to receive compound notices from the Companies Commission of Malaysia (SSM) soon after lodging their audited financial statements. These compounds were imposed following qualified, adverse, or disclaimer audit opinions, with penalties reaching RM40,000 to RM50,000 for companies and RM30,000 to RM40,000 per director.
Even after discounts of 50% or 75%, the remaining sums are still substantial for SMEs. For many, this enforcement action feels sudden, punitive, and poorly timed.
As a former President of the Malay Chamber of Commerce and a long-serving accounting practitioner, I believe this move is unwelcomed, burdensome, and not in the spirit of nurturing Malaysian businesses, particularly at a time when SMEs are already under severe pressure.
The Reality Facing SMEs
SMEs today operate in a difficult environment. Cash flow is tight due to delayed tax refunds and more aggressive enforcement by the Inland Revenue Board (IRB). Sales margins are shrinking as foreign companies—especially from China—enter the Malaysian market with significantly lower prices. At the same time, operating costs continue to rise, driven by higher minimum wages, statutory contributions, utilities, logistics, and compliance requirements.
Against this backdrop, audit qualifications have become more common. In many cases, they arise from impaired receivables, inventory valuation issues, weak documentation, or going-concern uncertainties. These are often symptoms of economic distress, not fraud or deliberate misconduct.
Yet SSM’s recent actions appear to treat all audit qualifications as immediate enforcement triggers, warranting heavy compounds without distinction.
Why Impose Compounds Now?
The timing of this enforcement drive is deeply concerning. If the goal is to improve corporate governance, then enforcement should be measured and sensitive to economic conditions.
Many affected SMEs are already struggling to meet tax instalments, negotiating with creditors, downsizing operations, and fighting intense market competition. Imposing five-figure penalties at this moment risks pushing otherwise viable businesses into insolvency.
Good regulation should strengthen resilience—not weaken it.
Why No Warning Before Punishment?
Equally troubling is the apparent lack of warning. Many companies lodged their accounts in good faith through the MBRS system, only to receive compound notices shortly afterwards. There were no advisory letters, no rectification periods, and no opportunity to explain or improve.
This creates the perception that enforcement is automatic and revenue-driven, rather than aimed at improving compliance.
Regulators should not be silent enforcers lying in wait. Effective regulation requires communication, proportionality, and due process.
Education Must Come First
Most SME directors are not accountants. They rely heavily on auditors and company secretaries to guide them. Penalising directors heavily—especially non-executive or “sleeping” directors—without prior education or warning is neither fair nor effective.
Corporate governance cannot be built on fear alone. Without education, enforcement becomes punitive rather than corrective.
Wider Consequences for Business Confidence
This approach risks unintended consequences. Directors may resign to avoid personal liability. SMEs may avoid audits altogether where exemptions apply. Transparency could decline instead of improve.
Malaysia’s economic success has always depended on a partnership between government and business, particularly in supporting local enterprises. Heavy-handed enforcement undermines trust and discourages entrepreneurship.
A More Balanced Way Forward
SSM’s statutory powers under the Companies Act 2016 are not in question. However, how those powers are exercised matters. Several policy improvements should be considered.
First, SSM should introduce a mandatory warning and rectification framework. For first-time audit qualifications not involving fraud, companies should receive warnings and be given reasonable time—90 to 180 days—to improve records or rectify issues before any compound is imposed.
Second, SSM must clearly distinguish between economic distress and misconduct. Going-concern or impairment-related qualifications should not be treated the same as deliberate misstatements.
Third, personal liability for directors should be proportionate to their role. Non-executive and inactive directors should not be penalised at the same level as executive directors who control day-to-day operations.
Fourth, enforcement should follow a graduated approach—from advisory notices, to warnings, to reduced penalties, and only then full compounds for repeated non-compliance.
Finally, education must precede enforcement. SSM, together with professional bodies, should strengthen director awareness programmes and publish clearer guidance on the implications of audit qualifications.
Conclusion
Strong corporate governance is achieved through clarity, fairness, and trust, not fear. A regulator that educates before it penalises strengthens the economy; one that compounds without warning risks weakening it.
If Malaysia is serious about supporting SMEs as the backbone of the economy, regulatory enforcement must remain firm yet humane, lawful yet business-friendly, and truly Malaysian in spirit.
Abd Halim bin Husin
Former President of the Malay Chamber of Commerce 20-23