Like a Rolling Stone and the Failures of Internal Controls

by Thomas Fox

I continue my celebration of Bob Dylan, Nobel Laureate, by reflecting on what many consider to be his greatest recording, Like a Rolling Stone. In 2004, Rolling Stone magazine named it as the greatest song of all time. Interestingly, Columbia Records executives initially rejected the song as too long to be released as a single because it came in at over 6 minutes in length. However, through a campaign of subterfuge, Dylan’s manager was able to have it played by New York City DJs. The popularity of the song became so great that the same Columbia Records executives were forced to release it and it went to Number 2 on the Top 40.

According to the site, “The most important impact of “Like A Rolling Stone” was not commercial but creative. Rolling Stone magazine said Dylan “transformed popular song with the content and ambition of ‘Like a Rolling Stone.’” Or as Bruce Springsteen said of the first time he heard it, “[it] sounded like somebody’d kicked open the door to your mind.”” Yet for me, it was the opening organ riffs played by a 21-year-old Al Kooper who was just sitting in on the session. According to the Financial Times (FT), in it’s the Life of a Song column, Peter Aspden said Kooper began his opening solo, “like a kid fumbling in the dark for the light switch. And suddenly the song turns into the tumbling, cascading version that will become the finished article.”

While I have been writing a great deal about what Wells Fargo did in the past which has brought it such grief, today I want to consider what it might do to begin to dig itself out of the hole it finds itself in with the regulators, the public, its customers, investors and shareholders. In her Fair Game column, appropriately entitled “Wells Fargo Must Make Clean Break, Gretchen Morgenson said, “Even after two big shuffles at the top, Wells Fargo is still working from the same playbook. And for the bank’s stockholders, that could mean more frustration lies ahead.”

Morgenson cited to Sarah Bloom Raskin, deputy secretary of the United States Treasury and a former member of the Federal Reserve Board of Governors, who “said that Wells Fargo needed to shift from a reactive crisis-management stance to proactive risk management. And this may require more significant change than the company is offering.” Raskin added, ““The whole country is watching to see if this bank is seizing the opportunity to make a clean break from doing business in a way that strains its reputation with its customers to one that enhances it. This is an opportunity to bring in a new perspective at the top.””

In an email sent out to Wells Fargo customers, the bank stated, “Over the last several weeks, you may have heard about the settlements we’ve made involving some of our customers receiving products or services that they did not want or request. We are deeply committed to serving you and your financial needs, and in those instances, we did not live up to our commitment. This is inconsistent with our values and with the culture we work hard to maintain. It’s not who we are as a company.” The bank then went on to outline four steps it put forward to try and regain customer confidence.

Yet Morgenson maintains that it is more than simply customer outreach the bank must demonstrate. It is the overhaul of an entire culture which led to the miasma. She cited to “Richard Bove, a veteran bank analyst at Rafferty Capital Markets, [who] said Wells Fargo needed an overhaul that went far beyond the scandal itself. Yes, repairing the culture that allowed the fraudulent practices to occur is a crucial task for Mr. Sloan” but even more is needed. Morgenson wrote, “The pervasive opening of sham accounts, a practice in a division overseen by Carrie Tolstedt, also a top Wells Fargo executive, would certainly seem to qualify as fraud relating to the bank’s internal controls.” Rather amazingly when she asked Wells Fargo for comment on whether this catastrophic failure of internal controls had been reported to the Board of Directors, a spokesman for the bank responded, “the bank had determined that the financial impact of the problematic practices was not meaningful. “The vast majority of the accounts reviewed did not generate fees or result in net income for the company,” Ms. Randolph said in a statement. “In fact, it cost Wells Fargo more than $10 million to open and service those accounts, which generated the $2.6 million in fees that was returned to customers.””

Now Wells Fargo is saying they actually lost money on the illegal accounts that they opened. If employees were engaging in such behavior it must mean they were incentivized to do so. When the conduct sought costs a company as much as Wells Fargo, it means that there were multiple failures of internal controls around a variety of financial, as well as cultural and compliance issues.

Yet the basic question remains of what can the bank do, particularly in light of promoting the former Chief Financial Officer (CFO) to Chief Executive Officer (CEO)? Chris Tomlinson, writing in the Houston Chronicle in a piece entitled “Sizing up companies’ good deeds accurately could bring rewards”, discussed the concept of a “purpose-driven enterprise” that is gaining currency. Such a concept basically says that companies must “do more than make money” and “A company’s purpose should be to identify a societal need and fulfill it using capitalism.” Well Fargo needs to understand that as a bank it is in the trust business and it must fulfill that basic requirement to begin to extricate itself. Whining that controls did not fail because the amount was ‘not material’ is the excuse of every company which is asleep at the switch. Moreover, such an attitude will be well noticed by regulators that a company does not seem to even understand the root cause of its cultural and compliance failures.

So, when Bob Dylan asks “How does it feel, to be a rolling stone?” Wells Fargo may be in a position to answer for some time to come.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Thomas Fox, Compliance Evangelist | Attorney Advertising

Written by:

Thomas Fox

Compliance Evangelist on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.