SOX Compliance Can Transform Payroll Management

Time tracking in today’s service businesses is central to understanding costs, to the billing process and tracking salary information or paid leave, all issues with important Sarbanes-Oxley (SOX) implications, according to Curt Finch , writing for The Human Resource payroll professionals need to understand how their functions can lead to risk or greater profitability for the company as a whole. Payroll managers who outsource some of their processes also need to be aware of SOX compliance issues and other risks with vendors.

Finch presents an example of a SOX matrix for an HR/payroll process by which people are hired, paid, fired, given benefits, etc. A SOX subprocess could be “payroll calculation,” and the objective of the subprocess is that people are receiving the correct payment for work they actually performed. Risks in this area could include “buddy punching” or unauthorized work or wrong salary information entered into the system. Controls a business owner might want to introduce could be the use of hand scanners to identify hourly employees, timesheet software that records authorized hours and separation of duties for salary entry vs. job entry.

But Finch argues that the HR professional on the executive team must view his or her responsibility as extending beyond the SOX compliance for payroll data entry to other business functions that depend on time tracking data. When SOX efforts lead a company to consider an upgrade in payroll systems, he says, the payroll professional should consider one that helps in all business processes.

Most large companies have outsourced the repetitive tasks related to payroll processing, and according to William Laurent, writing in, these companies need to consider SOX requirements in the relationship ensure that their vendors:

  • Satisfy all current regulatory and compliance requirements that may affect the relevant business spheres of a client and specifically the business areas that drive the processes and functions being outsourced.

  • Have in place appropriate internal governance controls and policies.

Executive audit committees, Laurent says, are finally beginning to understand their responsibilities in IT governance as it relates to outsourced vendor management and outsource service procurement.
“The current vigorous regulatory environment, coupled with rapidly changing technology and business landscapes, demands that executives fully weigh their potential downsides and risks of each outsourcing services relationship before jumping to outsource critical business functions,” Laurent cautions, according to

E-filing can help smaller companies that depend on payroll services companies to manage their vendor risks. Mr. Robert McCampbell, the United States attorney in Oklahoma City, suggests that payroll service clients get a copy of Form 941, the form filed by most businesses when they pay quarterly payroll taxes, the New York Times reports, and use the Electronic Federal Tax Payment System to monitor those payments. He also suggests that business owners make theirs the address of record, not the payroll service's, so that if the I.R.S. sends a notice of overdue payment, they will see it.

You may like these other stories...

Starting in October, the IRS will send warning letters to tax return preparers who appear not to be complying with Earned Income Tax Credit (EITC) due diligence requirements.Section 6695(g) of the Internal Revenue Code...
BKD LLP adds Illinois accounting firm Wolf & Co.Springfield, Missouri-based CPA and advisory firm BKD LLP and Chicago-based accounting firm Wolf & Co. have agreed to merge, the firms announced on Monday. Wolf will...
A new government report on Monday found that the IRS may not be completing the required research steps in collecting delinquent taxes before considering the cases “not collectible.”The Treasury Inspector General...

Already a member? log in here.

Upcoming CPE Webinars

Oct 9In this jam-packed presentation Excel expert David Ringstrom, CPA will give you a crash-course in creating spreadsheet-based dashboards.
Oct 15This webinar presents the requirements of AU-C 600, Audits of Group Financial Statements (Including the Work of Component Auditors).
Oct 21Kristen Rampe will share how to speak and write more effectively by understanding your own and your audience’s communication style.
Oct 23Amber Setter will show the value of leadership assessments as tools for individual and organizational leadership development initiatives.