Sarbanes Oxley Act: Compliance and Risk Based Approach

Under the section 404 of the Sarbanes-Oxley (SOX)records should be rewarded for the effort they put in.
Act, a public company has to file an internal report2) Reviewing Controls:
about the financial reporting procedures it follows, theTest to see if the controls work, as they are intended
effectiveness of its design and operation, and theto. Your approach should be well planned. This will help
trustworthiness of its financial dealings.reduce the number of controls you need to test by
The Impact of Sarbanes Oxley on Public Companies:weeding out the ones that do not work. The
The internal report to be submitted under the SOXrisk-based approach is applied to controls for financial
guidelines need to be detailed, and give a description ofstatements. You can also consider more than one
the financial dealings and state of the company. Thetype of control, or a blend of all, like manual/automated,
company needs to implement cost effective solutions,higher/lower etc.
reduce wasteful expenditure and use effective3) Improving the Testing Procedure:
measures to cut down on costs. This is the only wayOnce the controls best for particular applications are
to make a favorable impression once the internalsingled out, it will be necessary to test them for
report is out.compliance. Since testing can be expensive, most
Sarbanes Oxley Compliance Act Risk Basedcompanies stagger the procedure over a period of
Approachtwo years. In the second year, more risk-based
According to financial gurus, the Sarbanes Oxley Actapproaches are employed, and even external auditors
should be considered an opportunity for streamliningcalled in, if needed. Internal testing procedures must be
financial applications, and reducing costs forstreamlined, and testing plans are standardized.
compliance. It is an opportunity for upgrading financialCompliance with the Sarbanes Oxley Act makes it
systems, and putting in modern infrastructure. Here aremandatory that organizations make testing procedures
some risk-based approaches:and the risk based approach part of their daily
1) Good Management:business applications. The Act should be seen as an
If the senior management is convinced about theopportunity for streamlining controls, reduce complexity,
advantages of controls, the employees and junior levelimprove communication within the organization, and
managers also come round to the idea. While thereduce the risk of dishonest financial statements.
money and time spent on compliance may reduceThere are a number of consultants available who can
after a period, the commitment of the managementhelp you and your company to prepare for Sarbanes
should never diminish. In order to ensure compliance,Oxley Act. You can locate them all over the net by
incentives like promotions, raise, shares etc. are a gooddoing the correct search.
option. Those employees with good compliance