Home > Security Tips > Compliance Counselor > SOX 404 compliance: Efficiency is key
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

COMPLIANCE COUNSELOR

SOX 404 compliance: Efficiency is key


Robert D. Kugel
06.14.2005
Rating: -2.50- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



What you will learn from this tip: How to better understand SOX Section 404 and improve compliance efficiency.

The intent of Sarbanes-Oxley (SOX) Section 404 is to improve internal control over financial reporting. The number and scale of accounting scandals in the wake of the 1990s stock market bubble forced a change from informal to formal control mechanisms. SOX was enacted so investors in public companies could have reasonable confidence that financial reports are prepared according to generally accepted accounting principles (GAAP) and therefore fairly represent the results and condition of the company.

Although the word "control" stresses fraud prevention, it also carries a broader context of safeguarding assets (i.e., preventing undue risk), managing spending and maintaining a sound accounting environment. To address the shenanigans instigated by senior executives, the law made them responsible for having adequate controls over financial reporting, periodically attesting to the effectiveness of their internal controls and reporting any issues with the control systems and methods used to assess their effectiveness.

The vagueness of the law's language, the lack of enf



orcement history and the potential severity of failing to "pass" has created a great deal of anxiety among senior executives of public companies. Since SOX is here to stay, companies should focus on improving compliance efficiency. One important way to improve compliance efficiency is to reduce the number of points of control. There are at least two ways to do this. How well SOX addresses the original impetus of preventing large-scale, high-level financial fraud remains to be seen. Since public companies are required to comply with the law, many of the actions they take to improve their compliance efficiency will have the added benefit of making their finance operations more efficient.

MORE INFORMATION:

Robert D. Kugel is CFA, VP and Research Director at Ventana Research. He heads up the Financial Performance Management (FPM) practice, focusing on the intersection of information technology and the finance organization. The FPM research agenda includes the application of IT to financial process optimization and collaborative systems, control systems and analytics, profitability management and advanced budgeting and planning. Rob has been a technology analyst for over 20 years.

Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




BROWSE BY TAG
Compliance Counselor,   Security Audit, Compliance and Standards,   Sarbanes-Oxley Act,   Sarbanes-Oxley Act,   Infosec-Related Regs,   Compliance,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Compliance Counselor
Common PCI questions: Web application firewalls or source code review?
PCI management: The case for Web application firewalls
The basics of enterprise GRC project management
PCI DSS: The structure of a standard
How to choose between source code reviews or Web application firewalls
HIPAA compliance: New regulations change the game
Data security best practices for PCI DSS compliance
Key elements of a HIPAA compliance checklist
A preview of PCI virtualization specifications
Strategies for email archiving and meeting compliance regulations

Sarbanes-Oxley Act
Ex-SEC chief Pitt decries state of Sarbanes-Oxley, risk management
Information security book excerpts and reviews
Internal audits for Sarbanes Oxley and internal IT support
Internal auditors and CISOs mitigate similar risks
Implement security and compliance in a risk management context
Does password sharing in international branches violate SOX?
Consensus Controls project aims to set benchmarks for compliance
Security visualization helps make log files work
The Little Black Book of Computer Security, 2nd Edition
RSA attendees see data classification, rights management projects stumble
Sarbanes-Oxley Act Research

Sarbanes-Oxley Act
Defining adequate security controls
Ongoing SOX compliance: A security team's to-do list
SOX Compliance for the Security Practitioner
Define security's role in the regulatory process
CSO INTERVIEW: Regulatory pain is a two-way street
Outfox SOX: How to make regulations work for you
Security compliance - Separating FUD from reality, part one: Sarbanes-Oxley
The real deal with Sarbanes-Oxley: Perspectives for the security manager

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
More Security Resources for Resellers, VARs and OEMs
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts