How we help you
Assurance is more crucial than ever as financial services organizations seek to build greater confidence with customers, members and regulators.
Leverage sector-specific services for custody, internal and single audits.
Access customized, risk-based financial statement audits and reviews.
Strengthen stakeholder confidence with experienced compliance support.
Address assurance needs beyond financial reporting.
Gain insight from your assurance
Wipfli leverages our strong CPA foundation and financial services industry experience to take assurance further, giving you valuable insight into performance, processes and your organization’s overall health.
Explore our services
Wipfli has nearly 20 years of experience in performing custody audits in the broker dealer and wealth and asset management industries. Our custody audit process provides all the right components for you to satisfy your obligations, and our proven tools help us perform testing in an efficient manner, limiting disruption.
Wipfli keeps the focus of our review or audit on the critical issues facing your organization. We take a customized, risk-based approach that incorporates our experience in the financial services industry and business practicality so that we use your time and resources efficiently.
Wipfli uses our extensive experience and known frameworks to provide you with SOC 1, SOC 2 and SOC 3 services. Our team can also help evaluate your preparedness and controls against the Cloud Controls Matrix with a SOC 2+ audit.
Wipfli brings practicality and objectivity to every PCAOB audit. As a registered auditor with the Public Company Accounting Oversight Board, we’re ready to help SEC issuers and broker dealers manage their compliance challenges.
Wipfli’s internal audit services provide more than just a list of items that need fixes. We guide you in practical solutions and industry best practices based on the latest regulatory guidance. With our help, you can focus your resources on your management and board’s highest priorities.
Experience a smooth single audit process with Wipfli. Our professionals help meet your needs for accountability and transparency with dedicated services, including support for Uniform Guidance, that go beyond financial statements to help ensure your processes and systems stay in compliance.
Wipfli’s team brings experience in conducting over 700 employee benefits plan audits to help your organization better adhere to fiduciary responsibilities and maintain compliance.
Wipfli can meet your assurance needs beyond financial statements with attest services, including third-party validation and agreed-upon procedures. We’re ready to help remove doubt and bring clarity and efficiency to processes such as SEC custody exams, contract compliance and director exams.
Insights and resources
EVENT | December 9, 2026
CFO Roundtable: Prepare your financial institution for 2027 and beyond
Staying compliant today requires looking ahead to the regulatory and reporting expectations of tomorrow. Join us from 12:30-2:00 pm CT on December 9 for the CFO Roundtable, a forward-looking learning opportunity for chief financial officers, chief risk officers and other accounting leaders. This two hour session will provide strategic clarity on key audit, accounting and tax developments to help your institution prepare for 2027 and beyond. Proactively preparing for change helps your institution maintain a competitive advantage. Join us for the context and practical guidance needed to lead your team with clarity and confidence. Save your seat today.
ARTICLE
How to validate CECL compliance | Wipfli
Validate your CECL compliance program with practical approaches that include backtesting, assumption testing, peer comparisons and third-party review.
ARTICLE
Avoiding adjustable-rate mortgage loan compliance challenges
Adjustable-rate mortgage (ARM) loans can present compliance challenges throughout the entire loan life cycle. From application disclosures to rate adjustment notices, even minor errors can result in regulatory violations, customer confusion and operational risk. Keep reading to learn about several common ARM compliance errors and for guidance on avoiding them. Timing of early disclosures A common mistake is the timing of early ARM disclosures, including the Consumer Handbook on Adjustable-Rate Mortgages or a suitable substitute and a loan program disclosure for each variable-rate program in which the consumer expresses an interest. These do not always allow you three business days from the application date to provide the disclosures, like other early disclosures. Regulation Z states that these disclosures must be provided at the time an application form is provided or before the consumer pays a non-refundable fee, whichever is earlier (except that the disclosures may be delivered or placed in the mail not later than three business days following receipt of a consumer’s application when the application reaches the creditor by telephone, or through an intermediary agent or broker). Based on that requirement, an in-person application request requires the disclosures to be provided on the date of application and cannot be mailed later. Common mistakes with loan program disclosures Other common issues include incorrect information in the ARM loan program disclosure. If the initial interest rate is a discounted or premium rate (not based on the index and margin in effect), this fact must be disclosed in the early disclosure, but it is often missing. If using the optional 15-year historical example, make sure the disclosure identifies the month and day being used for each year in the table, verify the indexes disclosed are correct, and the margin used was one in effect within the prior six months. Often, the table is not updated properly or quickly enough. When disclosing the initial interest rate and payment example for a $10,000 loan, make sure a current rate is being used. Also, when updating the index and margin, make sure the example payment reflects the newly disclosed rate. Avoiding violations with ARM rate changes ARM rate changes and notification requirements probably cause the most errors. Using the wrong index is a common mistake. For example, an index that specifies a weekly average may be inaccurately disclosed with the daily version of the index. The weekly average is calculated on Friday and is generally published the following Monday, but the daily index is often used instead of the weekly average, resulting in errors and incorrect interest rates being assigned to borrowers. Make sure the index is pulled from the correct source and matches what was disclosed in the promissory note. Another common issue involves periodic caps. Institutions should verify that the caps disclosed in the promissory note match those being used to calculate rate adjustments. It is common to have different caps for the first-rate change than for subsequent rate changes. The system might be set up for those initial caps, but not updated for the caps that will follow for any subsequent rate changes. Errors in rate change notices are common Rate change notices present additional challenges. An example of an error is failing to provide sufficient detail when describing the index used to determine the new rate. Some systems limit the number of characters, so it takes a bit of creativity to fit the required details, especially when trying to spell out the “X”-year weekly average constant maturity U.S. treasury securities index, which is quite lengthy. The weekly average part is often omitted when truncating, but it is an important distinction in the index used and should be included. Also, the estimated balance and projected new payment must be based on the projected balance and number of remaining payments due at the time the rate will be changed. But some notices include the current balance at the time the notice is generated rather than a projected balance, which also results in the new payment being inaccurately calculated on the notice. In addition, the requirement to disclose rate limits and foregone interest rate increases can be confusing, as the disclosures required by § 1026.20(c)(2)(iv) regarding foregone interest rate increases apply only to transactions permitting interest rate carryover. Usually, a promissory note does not include such a provision, yet the foregone interest disclosure is being included anyway. Even though the interest rate was not increased fully due to a limit or cap percentage, there is no foregone interest when the note does not allow for such carryover of interest. Another issue is the required timing of the ARM adjustment notices. An initial notice must be sent at least 210 days, but no more than 240 days, before the new payment at the adjusted rate is due. The subsequent notices must be sent at least 60 days, but no more than 120 days, before the new payment at the adjusted rate is due. Occasionally, the credit agreement for an ARM originated AFTER January 1, 2015 (the date Regulation Z ARM notice requirements were effective) does not have an adequate lookback period for selecting the index prior to the change date (at least 45 days), resulting in issues with meeting the timing requirements for the ARM adjustment notices. For example, if the credit agreement does not contain a lookback period and requires the index to be selected on the change date, it is not possible to send an ARM adjustment notice at least 60 days before the new payment at the new rate is due, because the index will not yet have been published. Remaining compliant While ARM loans present numerous compliance challenges, many of the most common errors can be prevented through strong procedures, staff training and periodic quality-control reviews. Regular validation of disclosures, rate calculations and notice content can help institutions remain compliant while providing accurate information to borrowers. Read more FDICIA requirements: How banks approaching $1 billion should prepare for FDICIA compliance Tips for mastering accurate CECL regulatory reporting 6 steps to strengthen your financial institution’s call report preparation process
Reach out to our team
See how we move beyond compliance to help you uncover insights that strengthen operations, controls and organizational health.
LET'S CONNECT
See how Wipfli’s collaborative approach can help your organization turn regulatory, operational and technology challenges into opportunities for growth and resilience.
