Sarbanes-Oxley and Section 404: Old Dog, New Teeth

The failures we have seen in the quality and integrity of financial reporting in corporate America are clear evidence that something was awry. It is the responsibility of corporate boards, managements, public accounting firms and regulatory agencies to put confidence back into the financial statements issued by our society's most significant entities. Although some would argue that Sarbanes Oxley went too far, it is also now evident that government action and the use of enforcement muscle was required, if for no other reason than to move toward rebuilding public trust. There is no doubt that Sarbanes Oxley, and in particular, Section 404, has increased the expense of doing business for public corporations; however, this is neither a new mandate, nor a superfluous one. All parties engaged in this process have previously ignored the mandate, and must now accept reality, and get past the complaining.

A little history?back in 1977, the Congress of the United States passed a piece of legislation commonly known as the Foreign Corrupt Practices Act (FCPA). That law is well know for mandating the American corporations regulated by Securities Exchange Commission (SEC) be prohibited from making any type of corrupt payments to agents of governments or corporations in foreign countries. The civil and criminal penalties were quite onerous, and most corporations changed their practices in order to avoid those penalties.

The action taken by the FCPA in 1977 was often characterized as the most extensive application of federal law to the regulation of business since the passage of the 1933 and 1934 securities acts. In light of reports that American corporations were "greasing" government officials in a number of countries, Congress had acted decisively in order to restore the reputation of American business and eliminate improper payments to foreign governments, politicians and political parties. A seldom-remembered aspect of that legislation was that the same corporations were mandated to "devise and maintain a system of internal accounting controls sufficient to provide reasonable assurances that?transactions are recorded as necessary to?permit preparation of financial statements in conformity with generally accepted accounting principles or any other criteria applicable to such statements, and?to maintain accountability for assets."

This requirement got a great deal of press when the law was first passed, and many articles were written on how the new law would transform the way corporations managed and the way the public accounting firms audited. This was true for a short time, but the business world slipped back into its previous lack of concern for controls, and the public accounting firms conveniently allowed that slippage. Pressure for firms to maintain cost-effective (generally meaning lean) operations and pressure from firms to keep down auditing fees, caused the corporations and the audit firms to be at best, permissive in regards to compliance with the FCPA mandate.

In effect, the act had no teeth. All of the sanctions imposed were focused on punishing illegal payments, not for a failure to comply with the internal controls mandate. For 25 years, Congress, the SEC, public companies and public accounting firms essentially ignored a mandate in large measure because there was little or no enforcement action for a failure to comply. The academic leaders in the accounting profession have know for some time that there was a need to strengthen the systems of internal controls. In 1985, the Treadway Commission was asked to identify what caused fraudulent financial reporting and to make recommendations to reduce its incidence. The Commission's report included specific recommendations for management and boards of directors of public companies, the public accounting profession, the SEC and other regulatory and law enforcement bodies, and academics. The Commission made a number of recommendations that directly addressed internal control.

Importantly, the commission focused on the control environment, codes of conduct, competent and involved audit committees and an active and objective internal audit function. It also called for the sponsoring organizations to work together to create a framework for establishing and evaluating systems of internal controls. The result was the creation of the Committee of Sponsoring Organanizations of the Treadway Commission (COSO), which issued a report that outlined the principles for an effective system of internal controls.

Fast forward to the current rash of business scandals and the latest crises. This time the fear in Congress was so great that the mandate was restated; and this time, sanctions for non-compliance were included in the legislation. Now 25 years of neglect and sloppiness have caught up with the public and private sectors. The threat that corporate officers might actually be held accountable for failure and accordingly charged with civil and criminal penalties, in combination with a comprehensive regulatory system (Public Company Accounting Oversight Board) imposed on the accounting firms and a strengthened accountability by the SEC have now brought internal controls to the forefront.

The plain fact is, there is nothing new with SOX 404. Quality policy, practice and procedure documentation systems have always been the basis of sound internal controls and systems audits. The corollary fact is that corporations have generally given superficial attention to these programs, calling them unduly bureaucratic and unreasonably expensive. Over the last 25 years, we have not only ignored the law, we have also ignored sound management practice. All of this in the guise of being "cost-effective."

Sarbanes Oxley has obviously cost corporations huge amounts of money during this first year, but that is to be expected after 25 years of disregard for a well documented system of controls. In subsequent years the costs will be less, but there will still be a permanent increase in systems costs. Controls cost money and it is our own neglect that has created the need for corporate boards and managements to execute a major catch-up program.

The irony is that the COSO standard may not have been the best standard to impose on the audit process, but it was there and well documented when the Audit community needed to move quickly. With all the "push back" coming from the corporate community, there may well be some modifications that will make the audit process less onerous, but COSO does provide a basis for very much the same kinds of documentation that are imbedded in the standards of documentation found in best practices systems throughout the world. Corporate America simply needs to make the best of this mandate and use it as a launch point for continuous improvement of these controls so that they become both compliant and useful to effective management processes.

Just as with individual behavior, the way to get results in business is to either reward the results you seek, or to punish the results you want to eliminate. In government, more often than not, the sanction is more effective than the reward, or at least it is easier to deploy. We now have sanctions that threaten all participants in the process of establishing and evaluating the 25-year-old mandate for a system of internal controls. Those sanctions have commanded the attention of managements and boards alike; and SOX has been granted serious focus in every public company board room in America. Indeed, these standards are also spreading to non-public corporations, and even becoming a de facto standard for nonprofits as well.

There is little doubt that as time passes, effectiveness and efficiency will improve and thus limit costs, but they will never go away?that is, not as long as the enforcement teeth are still sharp. The sad commentary is that in the face of softer enforcement we disregarded a mandate for 25 years, and for this we are now paying the price.

Gerald Czarnecki, Chairman & CEO of the Deltennium Group, is a consultant, author and public speaker. A leading authority on corporate governance, Mr. Czarnecki conducts seminars and private boardroom sessions on Sarbanes-Oxley and the issues of governance that face boards of directors today. He also serves on the boards of directors of several large American corporations. For more information visit http://www.deltennium.com

---

6 Steps to Effective Communication

Effective leaders are known for being excellent communicators. Here's what... Read More

Knowledge Management - Keys to Successful Communities of Practice (Networks)

How can I make my community of practice truly effective?How... Read More

The Crisis of Modernity

Since the beginning of the industrial era our world has... Read More

ISO 9001 2000, Getting Started on The Route To Registration

ISO 9001 2000, Getting startedBefore starting the ISO 9001 2000... Read More

3 Keys to Being a Fearless Executive

In my work with business executives, I have come to... Read More

Effective Meetings Begin With a Real Agenda

Everyone knows that an agenda is the key to an... Read More

Creativity and Innovation Management ? Motivation and Management Layers

Creativity can be defined as problem identification and idea generation... Read More

Make It Easy to Reply - Voice Mail That Works

If you are like most business people, voice mail has... Read More

Book Summary: Mind Your Own Business

A maverick is an independent person who will not go... Read More

Behavioral Interview Questions You Can Use Monday Morning

If past behavior is the best way to determine future... Read More

Business Innovation ? Core Competency and Competitive Advantage

Creativity can be defined as problem identification and idea generation... Read More

Four Corners of a Triangle: Why Organizations Succeed or Fail

When we want to hire people for a corporation or... Read More

Gift Giving for Business a Major Headache

Corporate gifting is a big headache for most business owners;... Read More

Building Bridges of Communication

Building a 'bridge of understanding' between parties is... Read More

What Every Manager Should Know About How to Become An Effective Executive

In his book, The Effective Executive, Peter Drucker pointed out... Read More

To Outsource or Not to Outsource

In these days of restricted head count and tight budgets,... Read More

Improving Your Inter-Company Communications At No Cost

It's all very well having a flashy (and expensive) advertising... Read More

Work Life a Balancing Act

Australians are loosing their laidback, carefree reputation, as we continue... Read More

The Importance of Business Goals

For you to get where you want to go, there... Read More

PR Still a Mystery to Some

Unfortunately, there are managers who define public relations by its... Read More

Intercultural Management

The role of a manager is evolving in response to... Read More

The 5 Things Great Managers Sense about their People, Every Day

Using all of your senses, to help you test how... Read More

Delegation - The Basic Steps To Reducing Your Workload And Creating A Successful Team

If you have a task greater than you can handle... Read More

A Leadership Screw Driver: The 90 Day Improvement Plan

I was talking with first-line supervisors in a utility company... Read More

Interviewing Candidates: 3 Ways to Avoid Snap Judgments

Have you ever hired the wrong person? If so, perhaps... Read More

Innovation Management ? The Need For Knowledge Managers

Creativity can be defined as problem identification and idea generation... Read More

Customer Focus - Just 5 SimpleThings You Need to Think About

You can boil down the difference between successful businesses and... Read More

Look Good on Voice Mail

Your use of voice mail tells others a lot about... Read More

Performance Expectations - 5 Tips and 5 Questions

People want to understand their role - they want to... Read More

Get It Done! Soft Skills not Hard Tools are Required

If your organization has people, then interpersonal skills are needed.I... Read More

Executive Performance -- Whos to Blame for Incompetent Managers?

A recent article in the Wall Street Journal raised the... Read More

Use QA As Your First Step To Outsourcing

Quality Assurance, or QA, is often given short shrift in... Read More

Effective Email Communication

Email, when used properly, can generate additional direct sales and... Read More