Ads by TechWords

See your link here
Receive the latest technology news and information.
IT Management
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Execs describe Sarbanes-Oxley compliance lessons learned

They would have devoted more time and dedicated resources to the effort

September 28, 2005 12:00 PM ET

Computerworld -

Neil Frieser, vice president of internal controls at Viacom Inc.
Neil Frieser, vice president of internal controls at Viacom Inc.
Image Credit: The Institute for Financial Excellence
BALTIMORE -- Executives who oversaw the first round of compliance with the Sarbanes-Oxley Act for their companies say they would have done things a bit differently in hindsight, including educating more workers about steps they needed to take, assigning dedicated staffers to assess and monitor critical controls, and automating a greater portion of repairs to IT controls deemed deficient.
"You want to start the process early, to educate as many people as possible," said Neil Frieser, vice president of internal controls at Viacom Inc. Frieser, a speaker at The Sarbanes-Oxley Conference & Exhibition, held here yesterday, said Viacom conducted a staggering 19,600 tests on 1,560 business controls and 540 IT controls last year to meet Section 404 of the law. The work covered 116 business processes and 75 IT applications throughout the media company, whose divisions include CBS, MTV and Nickelodeon.
One of the best decisions Viacom executives made was to identify and test internal controls centrally rather than handing the work off to each of a dozen business unit leaders, he said. "We developed a lot of guidance centrally instead of having a lot of guesswork in each of the business units. We weren't perfect in 2004, but we got more right than we got wrong."
Michael Hultberg, executive director at Time Warner Inc.
Michael Hultberg, executive director at Time Warner Inc.
Image Credit: The Institute for Financial Excellence
He wasn't alone. Michael Hultberg, executive director at Time Warner Inc., said officials at the media giant discovered during the first round of Section 404 compliance efforts that "many of the key controls we'd identified actually weren't that key." Time Warner, which spent a mind-numbing 350,000 man-hours identifying, evaluating and testing its financial and IT controls, ended up with a higher proportion of IT control deficiencies, such as security and change management issues, said Hultberg.
Looking back on Time Warner's first-year compliance efforts, Hultberg recommended that companies assign dedicated staffers to handle the work. "It's a heck of a lot cheaper than hiring [a third party]," he said.
Unlike Viacom and Time Warner, whose businesses are highly decentralized, The Dow Chemical Co. has a centralized business model to support 165 manufacturing sites in 37 countries. As a result, when the Midland, Mich.-based chemical manufacturer conducted 30,000 internal control tests last year to meet its Section 404 requirements, all self-assessments were reviewed by each of the work process owners, followed by the company's internal audit department, said Ron Edmonds, global accounting director for the company.
Ron Edmonds, global accounting director of The Dow Chemical Co.
Ron Edmonds, global accounting director of The Dow Chemical Co.
Image Credit: The Institute for Financial Excellence
Going


Jump to comments

IT Management

Additional Resources

WHITE PAPER
Approximately 60 percent of data migration projects overrun time or budget, while some fail completely. Download this white paper, "Enhancing Your Chance for Successful Data Migration," to learn the critical steps you need to take to execute a data migration project with minimum cost and risk to your business.
WHITE PAPER
Read the Gartner research note to learn why the TCO of a server-based computing deployment used to deliver all applications to users is around 50% lower than that of an unmanaged desktop deployment.
WHITE PAPER
Economic downturns have a tendency to accelerate emerging technologies, boost the adoption of effective solutions, and punish solutions that are not cost competitive or that are out of synch with industry trends. This IDC White Paper presents the results of an IDC survey of 330 companies in Western Europe, Asia/Pacific and the Americas that measures the receptiveness to Linux and takes into consideration changing views driven by the disruptive economic environment that businesses face today.

White Papers & Webcasts

Faster, Cheaper and Easier to Maintain
Can you afford not to upgrade your servers to today's advanced, energy-efficient technologies?  

Infonetics: WAN Optimization Appliance Market Highlights 1 Q09
Vendor market share positions shuffled once again in 1Q09, learn more now!  

Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...

Improving Customer Retention and Satisfaction
Download this White Paper Now!  

Efficient Root-cause Analysis in the face of Datacenter Complexity
Isolating Virtualization and n-Tier Application Issues, Measuring Success, Assessing Business Impact, and Enabling Technologies

Supporting Employees Anytime, Anywhere
Download this White Paper Now!  

Enterprise Data Governance: Bridging the Business-IT Gap
Register for this live webcast today!

Usability Is Everything
Download this short video! Provided by Workday.