{"id":28,"date":"2006-06-16T11:40:10","date_gmt":"2006-06-16T19:40:10","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=28"},"modified":"2006-06-16T11:40:10","modified_gmt":"2006-06-16T19:40:10","slug":"sarbanes-oxley-compliance-and-ecm","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/sarbanes-oxley-compliance-and-ecm\/","title":{"rendered":"Sarbanes-Oxley Compliance and ECM"},"content":{"rendered":"

It’s been\u00a0only four years since the Sarbanes-Oxley Act<\/a> (SOX) was passed.\u00a0 But in many ways this one piece of legislation has already had a profound impact on the entire business community.\u00a0\u00a0The\u00a0goal of SOX is to achieve greater transparency and accountability in financial reporting, and in doing so, provide a way to more closely scrutinize public coporations from the outside.\u00a0 Stiff fines, penalties and the threat of litigation have been strong motivators to get companies to comply.\u00a0 But many or maybe even most companies still have a long way to go.<\/p>\n

Part of the reluctance or difficulty with SOX is just coming to grips with what it all means.\u00a0 SOX does not clearly spell out in black and white the steps\u00a0for achieving compliance.\u00a0 It was intended to provide overall guidance, but it is very broad and lengthy, consisting of 11 parts and 66 sections.\u00a0 The language in SOX\u00a0was written in\u00a0very general terms to spell out requirements that apply to all public companies, and the\u00a0interpretation and the methods by which SOX compliance are achieved is still evolving.<\/p>\n

Application of SOX to a business requires a sound understanding of the company’s business processes and the flow of information in the business.\u00a0 Perhaps the most onerous\u00a0SOX requirement is contained in section 404 that requires companies to maintain documentation of all their internal controls and\u00a0to be able to provide\u00a0access to that information so that an external auditor\u00a0can regularly\u00a0review and attest to the company compliance\u00a0with the law.<\/p>\n

Section 302 requires that corporate executives provide and certify the correctness of the contents of company financial reports and also certify that the procedure for the preparation of the reports was done in a manner that is consistent with the law.<\/p>\n

Sections 302 and 404, in particular, and to a lesser extent, sections 103, 104, 105, 408, 409, 801, 802, 906 and 1102 of SOX focus on the management and control of business processes and the information that flows through them.<\/p>\n

Forward-thinking corporate executives have seen that Sarbanes-Oxley, while restrictive, is in many ways just good business.\u00a0 It is a very structured approach for reducing operational risk, improving business performance, and achieving competitive advantage.<\/p>\n

While there is no ‘silver-bullet’ for achieving SOX compliance, technology\u00a0exists today to simplify the task. \u00a0Enterprise Content Management<\/a> (ECM) components like Document Management<\/a>, Records Management<\/a> and Business Process Management<\/a> can assist in meeting many of the SOX requirements.<\/p>\n

Applying general ECM tools\u00a0to SOX compliance may make sense to many companies rather than\u00a0a closely tailored SOX-out-of-the-box solution.\u00a0 Many companies need to deal with other types of compliance other than SOX.\u00a0 There is a lot of overlap in requirements, but clearly the system should be flexible to handle requirements and scenarios that fall outside of those from SOX.\u00a0 Banks, finance and insurance companies are bound by Basel II<\/a>, health care companies are bound by HIPAA<\/a>, and public companies also need to comply SEC regulations<\/a> such as 17a-4.\u00a0 Not to mention FDA CPR 21 Section 11<\/a>, FASB<\/a>, IASB<\/a>, MISMO<\/a>, and the Patriot Act<\/a>.<\/p>\n

ECM assists in the capture and classification of documents and records and manages them through their complete lifecycle and controls their final disposition, and its use is applicable across a the entire range of regulatory compliance applications.<\/p>\n

ECM benefits for compliance applications:
\n– eliminate\/reduce the risk of being unable to locate critical documents
\n– save labor required to manage, locate and retrieve documents required for audits
\n– fast ROI from the improved speed in document retrieval
\n– ability to provide quick and accurate responses to regulatory bodies and court requests<\/p>\n

When approaching compliance, products from ECM tool and application vendors like Formtek<\/a> should form the base of the solution.\u00a0 ECM technology\u00a0can assist in dramatically reducing the overall cost of\u00a0achieving compliance.<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

It’s been\u00a0only four years since the Sarbanes-Oxley Act (SOX) was passed.\u00a0 But in many ways this one piece of legislation has already had a profound impact on the entire business community.\u00a0\u00a0The\u00a0goal of SOX is to achieve greater transparency and accountability…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,10,34],"tags":[],"class_list":["post-28","post","type-post","status-publish","format-standard","hentry","category-compliance","category-content-management","category-storage"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/28","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=28"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/28\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=28"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=28"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=28"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}