|
Tuesday, May 08, 2007 Up to now, smaller public companies -- usually those with just less than $75 million in public equity -- have not been required to comply with Section 404 of the Sarbanes-Oxley Act. That section requires that a public company's management file a report on its assessment of the company's internal control over financial reporting -- including the financial work that passes through IT. It also requires the company's auditors attest to the quality of the company's internal control over financial reporting in the auditor's annual report. The Securities and Exchange Commission (SEC) itself has recognized the challenges for smaller companies: smaller companies typically don't have full-time financial controllers; managers in smaller companies have a broad span of control, and this could lead to management override of financial controls; and smaller companies are more dynamic and don't have well-documented processes. Your company may have a lot of work to do to produce a report that makes investors feel confident about your numbers -- even if you are the most honest company. SARBANES-OXLEY ADVICE FOR SMALLER PUBLIC COMPANIES Labels: Champy, sec, small business Previous articles PCAOB Concludes First International Auditor Regula...
|
Sponsored by:
Kumquat: Get the feedback you deserve
Learn more
FREE to Inside Sarbanes Oxley readers

|
About inside Sarbanes-Oxley inside Sarbanes Oxley is dedicated to finding the best sources of news and information on the changing landscape of Sarbanes Oxley and compliance. Whether you call it SOX, Sarbox, or the Sarbanes-Oxley Act of 2002, look no further than inside Sarbanes Oxley. More Copyright © 2004-2006, Inside Sarbanes-Oxley
|
Additional resources Try these recently updated resources: RSS Feed Interested in staying up-to-date on all the latest Sarbanes-Oxley news? Subscribe to the inside Sarbanes-Oxley RSS feed and get all of the latest news on SOX delivered directly to your feed reader. inside
Sarbanes-Oxley RSS Feed
|
It is always advisable for small companies to take help of third party who can act as consultation and can also help to comply with regulatory compliance in very less time and in more cost effective way without any additional manpower to deploy for this kind of work. A crosswalk between different regulations poster from Symantec is a very useful tool. This poster is crosswalk between: Sarbanes Oxley, HIPAA, Payment Card Industry (PCI), GLBA, NERC standards CIP and PIPEDA (Canada) http://www.compliancehome.com/symantec/