|
Sarbanes-Oxley
Although the entire 66-page,
11-part Sarbanes-Oxley Act may not be
applicable to your company, section 404 ought to trigger compliance
to
standards by which you can measure internal controls. Section
404 --
process, documentation and monitoring, originally required for
September, 2003, and now pushed ahead to June, 2004 -- is also a
requirement in June, 2005, for multinationals who have a foot in
Wall Street. In a recent meeting with a Director of Internal
Audit, he said, "Despite the fact that we are a privately
held American corporation, ethics and the display of integrity are
important to us. Though we do not have to, we will comply with the
Sarbanes-Oxley Act."
The recent provocative coverage of
former Enron treasurer, Ben Glisan, being led in chains from the
federal courthouse in Houston, has led some
C-level people to correctly believe that non-compliance to this
legislation could someday result in a peer being led away in
handcuffs. And most people incorrectly believe that to achieve
Sarbanes compliance, they must purchase new technology.
Hardest hit by the decrease in
corporate IT buying, software companies have been quick to offer the
Sarbanes-Oxley Holy Grail. Mr. Richard Mogull, an analyst with
tech-research firm Gartner, declares, "Sarbanes-Oxley has no
technology requirement. If someone comes up to you and tries to tell
you that you have to buy software to become compliant, my advice is
not to let them in the front door." He advises companies to
bring in auditors first.
Transparency
and Disclosure
Bringing in the guys with
clipboards, either to provide you with the roadmap to compliance or
to apply the principles of Sarbanes-Oxley, is recommended by all of
the well informed. One would agree with good reason that every
C-level person wants to ensure his or her reputation by demonstrating
fiduciary duty of transparency and disclosure to stakeholders.
During the period from March, 2000
to July, 2002, public companies lost $7.7 trillion in market
capitalization. This will never happen again. Sarbanes-Oxley Section
404 legislates an annual evaluation of internal controls and
procedures and requires management to assess and vouch for the
effectiveness of these controls. In addition, Sarbanes-Oxley
requires that an independent auditor file a separate report
attesting to the accuracy of management's assessment
Whether you are Sarbanes compliant
or not, a second set of eyes is required for an audit. Consider
assigning the 404-challenge to BetaWatch because we have the knowledge, infrastructure,
and teamsmanship to enable corporate information management. To let
you get to know us better, in a fortnight, BetaWatch will commence
posting a biweekly electronic note to help you follow the principles
and enact the digital due diligence ™ aspect of the Sarbanes-Oxley
Act 2002, section 404. In the meantime we offer you a
synopsis.
| Charted
below are the four broad digital due diligence required to
meet the 404-compliance challenge: |
| Result |
To do list |
| Internal
control |
Set
of structured programs to help internal and external
auditors look at transactions. |
| Consolidation |
Centralize
information from all systems and check that those
transactions were recorded. |
| Risk
management |
Set
parameters so that systems can flag up early warning signs. |
| Knowledge
real-time dashboard |
Business
intelligence display that provides management with a
high-level view. |
Hefty business controls and reporting will help you get a handle
on the
integrity of your software, systems and, most important, the
intangible knowledge kept in the brains or on the desktops of your
employees.
|
ßetaWatch Inc. digital due diligence
ßetaWatch Inc. President
and Senior Consultant Temi Grafstein and her team provide Sarbanes-
Oxley compliant Internal Controls and an Integrated Framework that
provides assurance regarding the achievement of effectiveness and efficiency
of operations and compliance with applicable laws and regulations. We comply
with the International Organization for Standardization’s document, ISO 9126,
a worldwide standard for software-product evaluation and quality characteristics.
We have provided technology audit
services for clients in a wide range of technologies including
middleware, virtual private network, customer-relationship
management, e-commerce, firewall, knowledge management, transaction
switch, point of sale, media convergence, online auction,
information warehousing, and P2P.
Grafstein developed ßetaWatch's
propriety software and system audit tools, digital due diligence, to accelerate revenue growth.
|
* |
Sanity Check |
|
* |
Security Audit |
|
* |
Competitive Intelligence |
|
* |
Field Trials |
|
Please send
comments, questions and suggestions for newsletter topics to:
tgrafstein@betawatch.com
To speak to
Grafstein call 1.866.638.2382 |
|