Sarbanes-Oxley and Section 404: Old Dog, New Teeth

The failures we have seen in the quality and integrity of financial reporting in corporate America are clear evidence that something was awry. It is the responsibility of corporate boards, managements, public accounting firms and regulatory agencies to put confidence back into the financial statements issued by our society's most significant entities. Although some would argue that Sarbanes Oxley went too far, it is also now evident that government action and the use of enforcement muscle was required, if for no other reason than to move toward rebuilding public trust. There is no doubt that Sarbanes Oxley, and in particular, Section 404, has increased the expense of doing business for public corporations; however, this is neither a new mandate, nor a superfluous one. All parties engaged in this process have previously ignored the mandate, and must now accept reality, and get past the complaining.

A little history?back in 1977, the Congress of the United States passed a piece of legislation commonly known as the Foreign Corrupt Practices Act (FCPA). That law is well know for mandating the American corporations regulated by Securities Exchange Commission (SEC) be prohibited from making any type of corrupt payments to agents of governments or corporations in foreign countries. The civil and criminal penalties were quite onerous, and most corporations changed their practices in order to avoid those penalties.

The action taken by the FCPA in 1977 was often characterized as the most extensive application of federal law to the regulation of business since the passage of the 1933 and 1934 securities acts. In light of reports that American corporations were "greasing" government officials in a number of countries, Congress had acted decisively in order to restore the reputation of American business and eliminate improper payments to foreign governments, politicians and political parties. A seldom-remembered aspect of that legislation was that the same corporations were mandated to "devise and maintain a system of internal accounting controls sufficient to provide reasonable assurances that?transactions are recorded as necessary to?permit preparation of financial statements in conformity with generally accepted accounting principles or any other criteria applicable to such statements, and?to maintain accountability for assets."

This requirement got a great deal of press when the law was first passed, and many articles were written on how the new law would transform the way corporations managed and the way the public accounting firms audited. This was true for a short time, but the business world slipped back into its previous lack of concern for controls, and the public accounting firms conveniently allowed that slippage. Pressure for firms to maintain cost-effective (generally meaning lean) operations and pressure from firms to keep down auditing fees, caused the corporations and the audit firms to be at best, permissive in regards to compliance with the FCPA mandate.

In effect, the act had no teeth. All of the sanctions imposed were focused on punishing illegal payments, not for a failure to comply with the internal controls mandate. For 25 years, Congress, the SEC, public companies and public accounting firms essentially ignored a mandate in large measure because there was little or no enforcement action for a failure to comply. The academic leaders in the accounting profession have know for some time that there was a need to strengthen the systems of internal controls. In 1985, the Treadway Commission was asked to identify what caused fraudulent financial reporting and to make recommendations to reduce its incidence. The Commission's report included specific recommendations for management and boards of directors of public companies, the public accounting profession, the SEC and other regulatory and law enforcement bodies, and academics. The Commission made a number of recommendations that directly addressed internal control.

Importantly, the commission focused on the control environment, codes of conduct, competent and involved audit committees and an active and objective internal audit function. It also called for the sponsoring organizations to work together to create a framework for establishing and evaluating systems of internal controls. The result was the creation of the Committee of Sponsoring Organanizations of the Treadway Commission (COSO), which issued a report that outlined the principles for an effective system of internal controls.

Fast forward to the current rash of business scandals and the latest crises. This time the fear in Congress was so great that the mandate was restated; and this time, sanctions for non-compliance were included in the legislation. Now 25 years of neglect and sloppiness have caught up with the public and private sectors. The threat that corporate officers might actually be held accountable for failure and accordingly charged with civil and criminal penalties, in combination with a comprehensive regulatory system (Public Company Accounting Oversight Board) imposed on the accounting firms and a strengthened accountability by the SEC have now brought internal controls to the forefront.

The plain fact is, there is nothing new with SOX 404. Quality policy, practice and procedure documentation systems have always been the basis of sound internal controls and systems audits. The corollary fact is that corporations have generally given superficial attention to these programs, calling them unduly bureaucratic and unreasonably expensive. Over the last 25 years, we have not only ignored the law, we have also ignored sound management practice. All of this in the guise of being "cost-effective."

Sarbanes Oxley has obviously cost corporations huge amounts of money during this first year, but that is to be expected after 25 years of disregard for a well documented system of controls. In subsequent years the costs will be less, but there will still be a permanent increase in systems costs. Controls cost money and it is our own neglect that has created the need for corporate boards and managements to execute a major catch-up program.

The irony is that the COSO standard may not have been the best standard to impose on the audit process, but it was there and well documented when the Audit community needed to move quickly. With all the "push back" coming from the corporate community, there may well be some modifications that will make the audit process less onerous, but COSO does provide a basis for very much the same kinds of documentation that are imbedded in the standards of documentation found in best practices systems throughout the world. Corporate America simply needs to make the best of this mandate and use it as a launch point for continuous improvement of these controls so that they become both compliant and useful to effective management processes.

Just as with individual behavior, the way to get results in business is to either reward the results you seek, or to punish the results you want to eliminate. In government, more often than not, the sanction is more effective than the reward, or at least it is easier to deploy. We now have sanctions that threaten all participants in the process of establishing and evaluating the 25-year-old mandate for a system of internal controls. Those sanctions have commanded the attention of managements and boards alike; and SOX has been granted serious focus in every public company board room in America. Indeed, these standards are also spreading to non-public corporations, and even becoming a de facto standard for nonprofits as well.

There is little doubt that as time passes, effectiveness and efficiency will improve and thus limit costs, but they will never go away?that is, not as long as the enforcement teeth are still sharp. The sad commentary is that in the face of softer enforcement we disregarded a mandate for 25 years, and for this we are now paying the price.

Gerald Czarnecki, Chairman & CEO of the Deltennium Group, is a consultant, author and public speaker. A leading authority on corporate governance, Mr. Czarnecki conducts seminars and private boardroom sessions on Sarbanes-Oxley and the issues of governance that face boards of directors today. He also serves on the boards of directors of several large American corporations. For more information visit http://www.deltennium.com

---

Compensation and Six Sigma Black Belts

One of the more ambiguous elements of a Six Sigma... Read More

Want to Manage Your Time? Get Real!

You know the drill - the ridiculous deadlines, the relentless... Read More

Creating Your Own Business Upturn - Powering Business Development

We all see it . . . business markets are... Read More

What is Six Sigma?

Six Sigma is a highly disciplined process focused on satisfying... Read More

Knowledge Management - Creating a Sustainable Yellow Pages System

How can I "know who knows" None of us can... Read More

Necessary Tasks You May Want to Delegate

As a business owner, time is of the essence. Running... Read More

Qualities of a Great Manager

In the call center environment we are often only as... Read More

Managing Change in the Workplace

Change is exhilarating. Change is terrifying. Change is badly needed... Read More

How To Decrease Downtime and Increase Productivity

All maintenance activities of the workforce must be documented, this... Read More

To Outsource or Not to Outsource

In these days of restricted head count and tight budgets,... Read More

The Key to Successful Performance Objectives

Have you ever tried to drive somewhere without proper directions?... Read More

What One Thing?

A few weeks ago I asked my readers what the... Read More

Will a Workplace Bully Bankrupt Your Company?

Safeguard Your Company Against Harrassment ClaimsTwenty-five percent of employees suffer... Read More

Lets Make Training More Interesting!

Many HR managers believe that by sending their workers to... Read More

Three Business Lessons From The US Postal Service

There was a buzz in the air recently about the... Read More

What is Data Visualization?

Data Visualization is InteractiveHave you ever booked your flight plans... Read More

Performance Appraisal - Ten Stupid Things Managers Do To Screw It Up

Performance appraisals aren't fun. But a lot of the time... Read More

The Silent Assassin - What to Do When They Visit You?

IntroductionThere are a group of people in the community that... Read More

Tales from the Corporate Frontlines: A New Managers Tale

This article relates to the Manager/Supervisor competency, commonly evaluated in... Read More

Management Apathy

I recently received a most interesting phone call.When I answered... Read More

25 Super-Practical Steps to Build Your Business!

For the past several weeks, we have focused on some... Read More

Let the Professionals Help You Out - Outsource

As your website grows in terms of attracting more footfalls,... Read More

Being a Great Boss

Are you one of those bosses that people just love... Read More

Help Your Employees Prepare for a Performance Appraisal

PREPARING EMPLOYEES FOR THE PERFORMANCE APPRAISAL INTERVIEWS: Remind employees to... Read More

Tales from the Corporate Frontlines: The Organizational Structure of Our Growing Business

This article relates to the organizational structure competency, commonly evaluated... Read More

Saying One Thing, Doing Another...

This week I was asked to speak at an internal... Read More

Great Hires: Avoid Costly Mistakes

Picking people for a job is like going... Read More

Problem-Solving Success Tip: Measure

Measure.The first key question to answer in starting a problem-solving... Read More

The 6 Steps to Six Sigma

Step 1Get the proper level of Six Sigma expertise at... Read More

Management to the Vision-Contribution and the Role of Compliance

As a manager our role is to:1. Establish the vision,... Read More

How to Overcome Your Fear of Firing

OVERCOMING FEAR OF FIRING "It was obvious that this employee... Read More

Employers - Protect Yourself from Custody Battles that Hold Your Company Hostage

Child custody? How'd that get to be an employer's concern?When... Read More

Have You Fixed the Broken Window?

Left alone it doesn't take long for a building with... Read More