First and foremost, cannabis is still considered an illegal Schedule 1 substance under federal law, and there are no guarantees that current or future administrations will continue the discretionary position that is the foundation for this industry. This dichotomy creates ethical and moral quandaries for CPAs. For example, would rendering services (tax, accounting, consulting services, etc.) to cannabis clients be considered a lack of “good moral character” or an “act discreditable” by their state boards of accountancy?

Also, would CPAs who render such services to cannabis clients be exposing themselves to allegations of “aiding and abetting” criminal activities? Thus far, several state boards of accountancy have issued guidance on providing services to businesses in the marijuana industry, and the profession is pushing the other state boards of accountancy to provide guidance.

Risk Assessment

From CAMICO’s perspective, a CPA firm considering opportunities to accept marijuana business clients should adopt a risk assessment approach to evaluate the risks to their firm from such clients. For example, assess risks associated with the specific client attributesfirm attributes

(all-cash business, complexity, uncertainty, etc.) along with assessing your specific

(risk tolerance, competency, level of service choices, etc.) as you carefully consider whether these prospective clients would be a good fit for the firm. As part of this risk assessment, firms should discuss and review the potential legal ramifications with an attorney who specializes in this industry.

As part of your process in assessing “risks,” never forget that your professional acts and decisions will be judged in hindsight. Therefore, if your firm decides to service cannabis clients (or any other higher-risk clients, for that matter), be extremely attentive to the following rules in the malpractice world:

• Professional standards for CPAs are merely the floor — juries often hold CPAs to higher standards.
• A CPA’s job is to advise the client of opportunities and warn the client of risk.
• CPAs are scriveners — lack of documentation is viewed as evidence of potential malpractice; jurors expect CPAs to have strong documentation, and the lack of it is viewed as not having met the “burden of proof.”
• “Guilt by association” can impact CPAs in a dispute.

Loss Prevention Best Practices

Apply appropriate safeguards to address the added risk associated with cannabis clients. The following are some best practices to consider:

• Meet principal(s) face to face to assist in determining integrity.
• Perform background checks on all principals.
• Insist that clients have ongoing legal representation.
• Obtain written consent annually to interact with client’s attorney.
• Document, document, document!
• Have a signed and detailed annual engagement letter clearly articulating scope and limits as well as enhanced “protective clauses.” CAMICO provides a sample engagement letter template to CAMICO policyholders (“Cannabis Client Tax Engagement Letter”).
• Document all planning, work, consultations and communications (internal and external).
• Obtain a management representation letter annually (regardless of type of service) that affirmatively confirms the client’s understanding of, and compliance with, state laws and regulations.

Consider creating a Crisis Management Plan

(or enhancing an existing one) to manage the firm’s potential reputational risks. A crisis management plan should address the potential consequences of servicing cannabis clients and should include engaging with a qualified attorney and public relations firm (to assist with operational and reputational risk responses), as well as specifying a spokesperson for your firm in the event of a crisis.

More information about CAMICO insurance solutions and risk management programs is available at www.camico.com

.