Corporate America Lagging in Internal Control Preparedness

Deloitte & Touche Press Release

A survey from Deloitte & Touche LLP underscores that more than a few U.S. corporations were unprepared to meet the original deadline of Section 404 of the Sarbanes-Oxley Act for introducing strong internal controls and processes for implementing the Act's provisions regarding the fairness, accuracy, and thoroughness of their financial reporting.

In particular, the survey of 65 top human resources executives of Fortune 1000 companies highlighted disagreement and confusion over human resources' role in helping companies achieve compliance. Of course, this was before the Securities and Exchange Commission extended the compliance deadline by one year to years ending on or after June 15, 2004.

According to the survey, many companies have not moved beyond the first steps, which include determining internal responsibility for performing a baseline assessment and subsequent annual evaluations of their controls and procedures for financial reporting. While 51 percent of respondents say the HR function is responsible for this activity, 29 percent say it "possibly" is, and 12 percent don't know. Another 8 percent say HR is not responsible.

"Compliance with the internal control requirements of Sarbanes-Oxley offers a huge opportunity for HR to enhance its service delivery and improve overall organizational effectiveness," says David Glueck, a director in Deloitte & Touche's Human Capital practice. "By helping companies establish, communicate, and annually assess the control environment, HR can have a significant impact on setting the tone and standards of acceptable behavior for ethical business practices within its organization."

Specifically, HR executives can help companies comply with Sarbanes-Oxley by making sure there is sufficient staffing, and that the staffing has the appropriate skills sets and background to execute the necessary control activities.

HR executives who want to take the best advantage of the one-year reprieve for Section 404 compliance should begin by mapping out a plan of attack. The model to follow, says Glueck, is based on the internal control framework developed by the Committee of Sponsoring Organizations of the Treadway Commission (COSO), which arose from the savings-and-loans scandals of the 1980s. The COSO framework breaks effective internal control into five interrelated components: control environment, risk assessment, control activities, information and communication, and monitoring.

To help their companies construct this framework, HR executives should begin by analyzing their organization's current state regarding the five components, recommends Glueck. Large companies may need to dedicate full-time staff to an internal controls program management team. Once it pinpoints the company's strengths and weaknesses, the team should move forward to correct the shortcomings. This framework also can be used by organizations' external auditors, which legally are required to issue a separate report attesting to management's assertion on the effectiveness of its internal controls and procedures for financial reporting.

In some cases, HR executives already are preparing to undertake activities that address internal controls but are not directly tied to their traditional role. For example, 56 percent of survey respondents plan to assess the roles and responsibilities of individuals with control activities to ensure they have the level of responsibility/authority/time/resources needed to complete these tasks. Moreover, 54 percent plan to work with the board of directors to increase the understanding of the board's roles and responsibilities.

"Complying with Sarbanes-Oxley will require significant changes in procedures and practices, as well as the day-to-day activities of many senior executives and the people reporting to them," notes Glueck. "HR can take a leadership role in making that transition a success while helping reinforce important corporate values and behavior."

About the Survey
Deloitte & Touche surveyed senior human resources executives from 65 companies representing a broad cross-section of industries with median revenue of $750 million and an estimated average of 3,500 employees.

You may like these other stories...

Here's a CPA who truly walks the walk. On March 15, Frank Ryan, CPA, departed San Diego, California, with plans to be in Ocean City, Maryland, by July 2 to teach a course at the Maryland Association of CPAs’ (MACPA...
When Theodore J. Flynn first joined the Massachusetts Society of CPAs (MSCPA) in 1970, it was a different world and a different profession.  The "Big Eight" were still headquartered in Boston. Vietnam War...
Accountant Rickey Charles Goodrich had it a little too good. Many bean counters would kill to serve as financial guru to the likes of Pearl Jam. Goodrich was hired in 2005, and the following year, he became the CFO of Curtis...

Upcoming CPE Webinars

Jul 16
Hand off work to others with finesse and success. Kristen Rampe, CPA will share how to ensure delegated work is properly handled from start to finish in this content-rich one hour webinar.
Jul 17
This webcast will cover the preparation of the statement of cash flows and focus on accounting and disclosure policies for other important issues described below.
Jul 23
We can’t deny a great divide exists between the expectations and workplace needs of Baby Boomers and Millennials. To create thriving organizational performance, we need to shift the way in which we groom future leaders.
Jul 24
In this presentation Excel expert David Ringstrom, CPA revisits the Excel feature you should be using, but probably aren't. The Table feature offers the ability to both boost the integrity of your spreadsheets, but reduce maintenance as well.