Maturity of SOX Strategies Show Increased Efficiency and Lower Costs

July 7, 2011

by Peter Alpern

The cost for Sarbanes-Oxley compliance isn't cheap, but the outlay of resources tends to stabilize and even drop in ensuing years, according to a new study.

Nine years after the accounting reform law sought to audit auditors in the wake of the Enron and WorldCom accounting frauds, internal control over financial reporting has strengthened, not waned, in spite of staffing issues associated with the struggling economy.

Eighty-nine percent of more than 400 respondents to the "2011 Sarbanes-Oxley Compliance Survey" by Protiviti, an independent global risk and internal audit and advisory firm, said the recession didn't make a dent in compliance, while just under half (45 percent) said that internal control over financial reporting at their companies is better today than a year ago.

There are several reasons for this, says Bob Hirth, executive vice president of Protiviti and leader of the firm's global internal audit and financial controls practice, starting with the experience curve, as organizations go through the auditing compliance process through its fourth and fifth generations. There were also more clarifications that came out in recent years, such as Auditing Standard Nos. 2 and 5.

"You saw the rules get clarified a bit more," says Hirth. "They also got a better understanding of what was important in the auditing and what wasn't."

The findings also revealed an important element about the accounting law: the strategies companies employ are evolving with maturity. Most of the companies polled handle all of their Sarbanes-Oxley compliance work internally. Most began their Sarbanes-Oxley compliance efforts by outsourcing the majority of their work; but in subsequent years, outsourcing to external auditors has shrunk dramatically.

Just as significant, the primary owner of Sarbanes-Oxley compliance initiatives in most organizations still remains the internal audit function, followed by the audit committee and executive management.

"Internal audit was the first group in most companies to get organized in anticipation of SOx and they're able to maintain their objectivity and independent positions because they report to the audit committee," says Hirth. "If internal audit ultimately had to test their own work, they would lose that objectivity."

The genesis of Sarbanes-Oxley was to provide a second set of eyes looking over the shoulders of auditors, but the study suggests it has had several positive unintended consequences. For instance, the compliance efforts have enhanced understanding of control design and control operating effectiveness, while also increasing effectiveness and efficiency of operations. Internal audit, moreover, is able to perform more traditional audits in areas other than financial reporting processes.

Overall, companies said they planned to reduce compliance costs over the year, but that reduction is expected to be nominal -- less than 10 percent on average.

The study also found there are still inefficiencies being worked through. To improve the effectiveness of Sarbanes-Oxley compliance, organizations are using peer benchmarking, using risk-based testing and establishing process owner accountability. There is also significant movement toward increasing the number of automated controls, using continuous monitoring tools and techniques and decreasing the number of manual controls.

"Organizations' systems of internal control over financial reporting need to be dynamic and constantly improved in order to effectively react to and address changes in operations and the external environment, such as new regulations, technology, accounting principles, industry issues and business models," says Hirth.

Average: 6.5 (4 votes)

according to the Chairman of

according to the Chairman of the NYSSCPA , is it true that there is no longer such thing as “inactive” status if you wish to hold the CPA title?

Click Here

A financial instrument that

A financial instrument that is insured by the pledge of assets from a third party, such as a deposit in a financial institution insured by a government agency may be considered an investment. Examples of these agencies include, in the United States, the Securities Investor Protection Corporation, Federal Deposit Insurance Corporation, or National Credit Union Administration, or in Canada, the Canada Deposit Insurance Corporation. how to stop smoking weed forever

Increase Efficiency,

Increase Efficiency, Minimize Risk and Reduce Cost by Automating Case Management Workflows. Discover More

Increase Efficiency,

Increase Efficiency, Minimize Risk and Reduce Cost by Automating Case Management Workflows, lower costs, tighter schedules and even give preference to contractors who employ “green” construction services.

quitting smoking timeline

learning more about how to

learning more about how to advance energy efficiency as a low-cost resource to reduce carbon emissions. Green home improvement and retrofit projects that only require a minimal investment and that have a sure (and often speedy) payback.

Recommended Site

A significant body of

A significant body of academic research and opinion exists regarding the costs and benefits of SOX, with significant differences in conclusions. This is due in part to the difficulty of isolating the impact of SOX from other variables affecting the stock market and corporate earnings. rxchemists.com

Stock option and bonus

Stock option and bonus practices combined with volatility in stock prices for even small earnings misses, resulted in pressures to manage earnings. Stock options were not treated as compensation expense by companies, encouraging this form of compensation. With a large stock-based bonus at risk, managers were pressured to meet their targets. foreign pharmacy

Lending to a firm sends

Lending to a firm sends signals to investors regarding the firm's risk. In the case of Enron, several major banks provided large loans to the company without understanding, or while ignoring, the risks of the company. Investors of these banks and their clients were hurt by such bad loans, resulting in large settlement payments by the banks. pharmacy affiliate program

Debate continues over the

Debate continues over the perceived benefits and costs of SOX. Opponents of the bill claim it has reduced America's international competitive edge against foreign financial service providers, saying SOX has introduced an overly complex regulatory environment into U.S. financial markets. Amazon Money Machine

create some policies

I think old school audit methodologies have actually served their purpose well for years, create some policies that can really deliver long-term cost savings and increase audit efficiency.

marijuana vaporizer

These kind of posts are

These kind of posts are always inspiring and I prefer to read quality articles, and i am very happy to find many good points here in the post, writing is simply great, thank you for the post.
roulette en ligne

Good day! I would love to

Good day! I would love to see how some kids diagnosed with Organic underwear would be cured if they played outside more and didn't have video games.las vegas virus removal | san diego virus removal

The accountancy reform law

The accountancy reform law expands the scope of public accountancy beyond compilation and attest services to include CPAs working in industry, taxation, academia and government. accounting training courses

The Sarbanes-Oxley

The Sarbanes-Oxley Compliance Kit is designed specifically to educate, explain, and guide you through the process. It includes a whole series of resources intended to help simplify, and set you on the right path... to help you achieve full compliance as painlessly as possible.
Samsung MZ-5PA256 SSD

I’m happy I found this

I’m happy I found this blog ! From time to time, students want to cognitive the keys of productive literary essays composing. Your first-class knowledge about this good post can become a proper basis for such people.
clubmz reviews

Debate continues over the

Debate continues over the perceived benefits and costs of SOX. Opponents of the bill claim it has reduced America's international competitive edge against foreign financial service providers, saying SOX has introduced an overly complex regulatory environment into U.S. financial markets. TESOL Certification

Management has more

Management has more flexibility under the new guidance to extend the effective date of testing performed during mid-year ("interim") periods to the year-end date. Only the higher risk controls will likely require roll-forward testing under the new guidance. Famous Quotes

The SOX guidance states

The SOX guidance states several hierarchical levels at which risk assessment may occur, such as entity, account, assertion, process, and transaction class. Objectives, risks, and controls may be analyzed at each of these levels Cake Spoon | Powerline Networking

Some companies process

Some companies process thousands of such entries each month. By automating manual journal entries, both labor and SOX assessment costs may be dramatically reduced. In addition, the reliability of financial statements is improved. Santa Claus

Using a shared service model

Using a shared service model in key risk areas enables multiple locations to be treated as one for testing purposes. Shared service models are typically used for payroll and accounts payable processes, but can be applied to many types of transaction processing. Pets

Frequent interaction between

Frequent interaction between management and the external auditor is essential to determining which efficiency strategies will be effective in each company's particular circumstances and the extent to which control scope reduction is appropriate. USA Debt Clock

For the highest risk areas,

For the highest risk areas, such as the control environment and period-end reporting process, internal auditors or compliance teams are likely the best choices to perform testing, if a significant degree of reliance is expected from the external auditor. People Search

Therefore, techniques such

Therefore, techniques such as self-assessment are appropriate for lower-risk areas, while internal auditors (or the equivalent) generally should test higher-risk areas. An intermediate technique in practice is "quality assurance," where manager A tests manager B's work, and vice-versa. Halloween Costumes

Management identified the

Management identified the misstatement risk for each significant account and disclosure as part of the scoping assessment above. The low, medium, or high ranking assessed should be associated with the controls related to the account. Scuba Diving

This typically involves

This typically involves identifying scenarios in which theft or loss could occur and determining if existing control procedures effectively manage the risk to an acceptable level. The risk that senior management might override important financial controls to manipulate financial reporting is also a key area of focus in the fraud risk assessment. drudge report

The SOX guidance states

The SOX guidance states several hierarchical levels at which risk assessment may occur, such as entity, account, assertion, process, and transaction class. Objectives, risks, and controls may be analyzed at each of these levels. Bumper Stickers

When the CMM is applied to

When the CMM is applied to an existing organization's software-development processes, it allows an effective approach toward improving them. Eventually it became clear that the model could be applied to other processes. This gave rise to a more general concept that is applied to business. foreign pharmacy

Because workers are paid more than

Because workers are paid more than the equilibrium wage, there will be unemployment. Efficiency wages are therefore a market failure explanation of unemployment – in contrast to theories which emphasize government intervention. Graduate Accounting

Workers pay isn't the cause

Workers pay isn't the cause of unemployment, corporate greed is. Big business failure is the main problem and single issue with smaller businesses failing, particularly from banking. I deal with a London Numbers based company and they struggled when the banks started having issues, this wasn't their fault, but the banks fault.

The product life cycle goes

The product life cycle goes through multiple phases, involves many professional disciplines, and requires many skills, tools and processes. Product life cycle (PLC) has to do with the life of a product in the market with respect to business/commercial costs and sales measures. optical illusions

Product life-cycle

Product life-cycle management is the succession of strategies used by business management as a product goes through its life-cycle. The conditions in which a product is sold (advertising, saturation) changes over time and must be managed as it moves through its succession of stages.
Telechargement Gratuit

Thanks for the article! I

Thanks for the article! I spent an enormous amount of time to find such essay in public. Your level of writing amezes me. These thesises written by you will soon reward you.
cell phone spy software

FASB has been very busy

FASB has been very busy working on this migration. NIRI will make our annual visit to FASB in Norwalk, Connecticut on August 1. We have had several cancellations, so if any corporate IR professional is interested in joining the group, please contact Kraig Conrad at NIRI for details. We are also asking you to bring someone from the accounting policy or financial reporting area of your company.
cell phone spying

Product life-cycle

Product life-cycle management is the succession of strategies used by business management as a product goes through its life-cycle. The conditions in which a product is sold (advertising, saturation) changes over time and must be managed as it moves through its succession of stages. 0800 numbers

Well, with what happened to

Well, with what happened to Enron, companies are now extra careful in handling their business. They have learned through that incident and firms have taken extra steps not to fall in the same demise as Enron did. - Dean Spasser

As an HR Consultant I'm

As an HR Consultant I'm always open to explore new technology and ideas, so I can pass on the knowledge to my clients. So far I've had really good results with Ultimate Software. Their performance management module is really good and pays for itself many times over in time if you have someone who knows what they are doing. I've also heard good things about SAP ERP and Peoplesoft. Personally, I prefer open source due to the cost, since not every company can afford Ultimate Software or all the modules of SAP. With bigger companies they can usually get a custom version made in India with the same functions for about the same cost as a yearly subscription, which is still a pretty good deal. Much like what we did with muay thai camps in thailand and muay thai.

Quartus believes most

Quartus believes most companies should choose to optimize their financial controls - even without the force of legislation. car title loans south carolina

Our company is a class

Our company is a class e-commerce company that sells all kinds of electronic products, including many products, especially mobile phones. Which products have been exported to the Middle East, Asia, Africa, Russia and other places. Welcome to visit our website. japanese hair straightening | african mango

I am a very small (gross

I am a very small (gross about 60,000) seller on Amazon and I am in deep distress over this 1099-K Form. The gross amounts are not correct. I am on a cash basis and when I make a sale on Dec 31st, I do not receive the money till January. Nothing I do is going to agree with what Amazon is reporting. Nothing. I am not going into the thousands of sales and break down each and every sale into its component parts.

Amazon is not reporting their fees, commissions, or return information on this form. That would have made too much sense.

I have sold on Amazon for ten years and have reported all the deposits that Amazon has dropped into my checking account. My taxes were easy to do and honest. How in the world did we let our congress do this to us?