Internal control volgens Sarbanes-Oxley

Regulation and Sarbanes-Oxley

Many of the papers in this special issue are concerned with regulation and some with the Sarbanes-Oxley Act (SOX). In this commentary, I will begin by summarizing the arguments for regulation that have been made in the literature.1 I will then consider whether these arguments apply to SOX. I will suggest that, rather than being based on sound principles, regulation often seems to be a consequen...

Applying Semantics to Sarbanes Oxley Internal Controls Compliance

The advent of regulatory compliance requirements such as Sarbanes Oxley Act has forced enterprises to set up a process for managing an effective internal controls system. We propose the introduction of a semantic layer in which the process instances are interpreted according to the required compliance controls represented as rules. We analyze in this paper the requirements for the implementatio...

Holistic Compliance with Sarbanes-Oxley

The theory underlying US securities laws is that investors are helpless without reliable information [Zelizer, 2002]. When Enron's collapse and other corporate frauds made it clear that "practically every element of our system of safeguards failed until it was too late to repair the damage," Congress reinforced those laws by passing the Sarbanes-Oxley (SARBOX) Act [O'Malley, 2002]. This new law...

Why Sarbanes-Oxley Whistleblowers Don’t Win

An Evidential Reasoning Approach to Sarbanes-Oxley Mandated Internal Control Risk Assessment

In response to the enactment of the Sarbanes-Oxley Act 2002 and of the release of the Public Company Accounting Oversight Board (PCAOB) Auditing Standard No. 5, this study develops a risk-based evidential reasoning approach for assessing the effectiveness of internal controls over financial reporting (ICoFR). This approach provides a structured methodology for assessing the effectiveness of ICo...