The Trickle Down Effect of Sarbanes on Internal Controls at Venture-Backed Companies | AccountingWEB

The Trickle Down Effect of Sarbanes on Internal Controls at Venture-Backed Companies

By Gary Levine - At a recent Two Step Software webinar entitled “Lessons Learned in 2007: A Recap of Stock Option Reporting Updates,” more than half the audience of financial executives responded that they had not taken any steps to prepare for the new risk assessment auditing standards that apply to non-public companies (Statement on Auditing Standards 104-111) despite the fact that according to Dan DeVasto, the CEO of Wolf & Company, P.C., these changes to the audit standards are some of the most significant in two decades.

As explained by his partner Scott Goodwin, although non-public companies are not required to provide the same types of certifications and management reports as public companies, since they are not subject to the Sarbanes-Oxley Act, the audit standards by which the internal controls of non-public companies are going to be reviewed are now relatively similar to those of public companies (SAS 104-111 from the AICPA for non-public companies; Auditing Standard 5 from the PCAOB for public companies). In both cases, auditors will be using a COSO type framework to assess whether a company’s internal controls over financial reporting are sufficient and will need to advise the audit committee if they are not. Of course, for a non-public company there is no requirement that the executives provide a Sec. 302 certification, that management provide a Section 404(a) report, or that the auditors provide a Sec. 404(b) opinion (which is not yet required for smaller public companies).

Question: Why are public companies spending significant amounts of money addressing their internal controls to comply with Sec. 404 of SOX and satisfy AS 5 while GAAP reporting venture-backed companies are largely paying little attention to satisfying SAS 104-111, although the exercise that their auditors will be going through evaluating the sufficiency of the internal controls over financial reporting for both types of companies will largely be the same.

Answer: For a non-public company, there is no threat of public embarrassment, lower share price, and criminal penalties for the company and management if they do not satisfy the internal controls requirements. There is only the risk that an audit will take longer, become more costly, and the audit firm will be required to document and communicate any material weaknesses to management and “those charged with governance” (SAS 112).

Let’s Ask: With the impact of SOX clearly being felt by non-public companies already, whether based on pressure and covenants from investors, lenders, insurers, and other stakeholders, is it really necessary to add the threat of criminal sanctions to encourage companies that plan to be acquired by publicly-held companies in the near future to raise the level of their internal controls over financial reporting?

I hope not. Maybe by sufficient education on the benefits that companies receive by adopting good corporate governance and appropriate internal controls over financial reporting, we can avoid “SOX Lite” from becoming mandatory for companies without public investors. Hopefully, instead, sufficient oversight can be provided by audit committees and directors of venture-backed companies that hope to one day become public themselves or be acquired by publicly-held companies. Better internal controls over financial reporting are relevant to any company that is looking to increase its value in the financial marketplace. Every venture-backed company finds this out during the business due diligence process which is eventually when the “rubber meets the road.”

Gary D. Levine, President and CEO
Two Step Software, Inc.

This blog

by Gary Levine - Gary Levine is the CEO and Founder of Two Step Software which provides market leading solutions for stock plan administration and corporate governance. His perspective is based on 20 years of experience.


More from this blog

Bloggers crew

Steve Knowles has spent 25 years in business and practice in the UK, but he also worked in the states and the years haven't dulled his way of seeing an alternative view to everyone else, and every day is a new adventure.


Joel M. Ungar, CPA is a lifelong resident of the Detroit area and a graduate of The University of Michigan. He is a principal with Silberstein Ungar, PLLC, a Top 15 auditor of SEC public reporting companies.


Allan Boress, CPA, with over 25 years as a practitioner and consultant to the accounting profession. Mr. Boress is the author of 12 published books in 6 different languages, including a best-seller, The "I-Hate-Selling" Book.


Larry Perry, CPA, CPA Firm Support Services, LLC, is the author of accounting and auditing manuals, author and presenter of live staff training seminars, and author of webcast and self-study CPE programs. He blogs about small audits, reviews, and compilations.

Sandra Wiley, COO and Shareholder, is ranked by Accounting Today as one of the 100 Most Influential People in Accounting as a result of her prominent role as an industry expert on HR and training as well as influence as a management and planning consultant. She is also a founding member of The CPA Consultant's Alliance. Sandra is a certified Kolbe™ trainer who advises firms on building balanced teams, managing employee conflict and hiring staff.

Maria Calabrese, CIR, Human Resources manager for Fazio, Mannuzza, Roche, Tankel, LaPilusa, LLC in Cranford, New Jersey, Maria's topics revolve around the world of: Mentoring, Performance management, and The "Y Generation," a.k.a. "The whY generation".


William Brighenti is a CPA, Certified QuickBooks ProAdvisor, and Certified [Business] Valuation Analyst, operating an accounting, tax, and QuickBooks consulting firm in Hartford, Connecticut, Accountants CPA Hartford.


Ken Garen, CPA, is the co-founder and President of Universal Business Computing Company (, a software development firm of high-volume, high-productivity accounting and payroll technology.


Eva Rosenberg, MBA, EA, is the publisher of, and author of the weekly syndicated Ask TaxMama column. She provides answers to tax questions from taxpayers and tax professionals worldwide.


Amy Vetter, CPA, CITP is the CPA Programs Leader for Intacct Corporation responsible for leading the CPA/BPO Partners nationally.

Brian Strahle is the owner of LEVERAGE SALT, LLC where he provides state and local tax technical services to accounting firms, law firms and tax research organizations across the United States. He also writes a weekly column in Tax Analysts State tax Notes entitled, "The SALT Effect." For more info, visit his website:
Scott H. Cytron, ABC, is president of Cytron and Company, known for helping companies and organizations improve their bottom line through a hybrid of strategic public relations, communications, marketing programs and top-notch client service. An accredited consultant, Scott works with companies, organizations and individuals in professional services (accounting, finance, medical, legal, engineering), high-tech and B2B/B2C product/service sales.

Rita Keller is a nationally known CPA firm management consultant, speaker, author, mentor and blogger. She has over 30 years hands-on experience in CPA firm management, marketing, technology and administrative operations.

Stacy Kildal is the mom of two fantastic kids, an Advanced Certified QuickBooks ProAdvisor, Certified Enterprise Solutions ProAdvisor, Sleeter Group Certified Consultant, a nationally recognized member of the Intuit Trainer and Writer Network, and co-host of RadioFree QuickBooks.
Michael Alter's blog specializes in providing practical advice to those who seek greater profitability and practice management tactics that enhance deeper client relationships.

Sally Glick, CMO, Principal, Marketer of the Year in 2003 and AAM Hall of Famer in 2007, leads a lively discussion of the constantly expanding roles of marketing and the professional marketers that drive this initiative in accounting firms of all sizes.


The IMA Young Professionals Blog features the insights of IMA’s Young Professionals Committee. Committee members share advice and experiences on careers, continuing education, work/life balance, and other issues affecting young accounting and finance professionals.


FEI Financial Reporting Blog provides highlights from SEC, PCAOB, FASB, IASB, and other regulatory news, including reporting under Sarbanes-Oxley Sect 404. It is written by Edith Orenstein, Director of Technical Policy Analysis at FEI.


Sue Anderson has 30 years of experience in continuing education for accountants. Currently she is the program director for online CPE provider CPE Link.


Jim Fahey is COO of Apple Growth Partners, a regional CPA firm in Ohio. His focus is on the effective and efficient use of technology within the firm by all team members.

Caleb Newquist is the Editor-in-Chief of Sift Media US, overseeing content for both AccountingWEB and Going Concern.

Leita Hart-Fanta, CPA, CGFM, and CGAP is the author of "The Yellow Book Interpreted" and owner of a website devoted to training for governmental auditors.


AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too! Members of our British team who publish share their ideas, insights, and perspectives from across the pond.