The Sarbanes-Oxley Yawn: Heavy Rhetoric, Light Reform (And it Might Just Work)

Sarbanes-Oxley Links IT to Corporate Compliance

In the wake of financial frauds and related audit issues, the US Congress passed the Sarbanes-Oxley (SARBOX) Act of 2002. Key to becoming SARBOX compliant are information systems (IS) that satisfy the mandates regarding internal controls, corporate governance, and fraud detection. These legal developments focusing senior management's attention on (1) internal controls are present and functionin...

Regulation and Sarbanes-Oxley

Many of the papers in this special issue are concerned with regulation and some with the Sarbanes-Oxley Act (SOX). In this commentary, I will begin by summarizing the arguments for regulation that have been made in the literature.1 I will then consider whether these arguments apply to SOX. I will suggest that, rather than being based on sound principles, regulation often seems to be a consequen...

Holistic Compliance with Sarbanes-Oxley

The theory underlying US securities laws is that investors are helpless without reliable information [Zelizer, 2002]. When Enron's collapse and other corporate frauds made it clear that "practically every element of our system of safeguards failed until it was too late to repair the damage," Congress reinforced those laws by passing the Sarbanes-Oxley (SARBOX) Act [O'Malley, 2002]. This new law...

Why Sarbanes-Oxley Whistleblowers Don’t Win

Sarbanes - Oxley and Enterprise Security: IT Governance - What It Takes to Get the Job Done

everal sections of the Sarbanes– Oxley Act of 2002 (SOX) directly affect the governance of the information technology (IT) organization, including potential SOX certification by the chief information officer, Section 404 internal control assessments, “rapid and current” disclosures to the public of material changes, and authentic and immutable record retention. The Securities and Exchange Commi...