Analysis of Internal Controls and Procedures Over Time (2021–2025)
Overall, ONEOK INC. has maintained a consistent posture regarding its internal control environment across the reporting period from 2021 through 2025. Management consistently concluded that both Disclosure Controls and Procedures (DCP) and Internal Control over Financial Reporting (ICFR) were effective in every filing analyzed. The company reported no material weaknesses or significant deficiencies during this five-year span.
Consistency of Control Effectiveness
The control environment has remained highly stable. From 2021 to 2025, the company consistently affirmed the effectiveness of its ICFR and DCP, utilizing the Internal Control-Integrated Framework (2013). Across all periods, there were no reported material changes in internal controls that were deemed likely to materially affect the control environment. This stability suggests a consistent operational framework for financial reporting.
Strategic Pivots and Scope Limitations
The most significant change observed over time is not a failure or weakness in the existing controls, but rather an expansion of strategic activity (acquisitions) which has necessitated corresponding changes to the scope of the ICFR assessment.
Acquisition Integration Timeline
Initially, the control environment assessment was presented without specific mention of large-scale integrations. This changed notably in 2023 when the effectiveness assessment explicitly excluded the Magellan Acquisition, a scope limitation permitted during the first year post-acquisition while operations were integrated.
In 2024, this pattern of exclusion expanded significantly as the company continued its growth strategy. The ICFR evaluation began excluding two additional recent acquisitions:
- EnLink Controlling Interest Acquisition: This entity represented a material portion of the financial profile, contributing approximately 7% of total revenue and 20% of total assets.
- Medallion Acquisition: This contributed approximately 1% of total revenue and 3% of total assets.
This trend continued into 2025, where the pattern of no material changes was maintained, but the underlying strategic activity (acquisitions) continues to drive scope limitations in the control assessment.
Risk Profile and Caveats
While the company has consistently reported effective controls, two key risk caveats were noted over time:
- Inherent Limitations: Starting in 2022, management explicitly acknowledged the inherent limitations of the ICFR system, noting that it may not be capable of preventing or detecting all misstatements due to changes in conditions or deterioration of compliance.
- External Validation: The effectiveness of the ICFR has been consistently supported by independent external auditing by PricewaterhouseCoopers LLP across all periods analyzed (2021–2025).