COMPLIANCE AND SARBANES OXLEY (SOX)

Sarbanes Oxley compliance (SOX) impacts on all UK subsidiaries of US companies i.e. those registered with the Securities and Exchange Commission (SEC).
Section 204 requires management to be responsible for the introducing and maintaining internal controls to a certain standard including security of computer systems.
The evaluation of these controls is through a framework and the effectiveness of these internal controls is measured by management using this framework and who must disclose any material weaknesses in the controls and will be evaluated by the organisation’s external auditor.
The framework includes a control environment, control activities, risk assessment, information and communication and monitoring.
Payroll plays an active role in SOX compliance since it is part of the financial activities of the organisation and so will have to also participate in any SOX audits.
When implementing or reviewing systems, processes and procedures SOX framework evaluation requirements should be included.
Failure to comply with SOX requirements can incur significant penalties and potentially lead to prosecution
When working with organisations who have to comply with SOX Paris and Parks ensure that any recommendations are SOX compliant.
Many of the SOX requirements are essentially best practice to reduce risk and so Pairs and Parks encourage UK bases companies to also consider implementing some of the standards.
Also See:
Payroll Compliance,
HR Compliance,
Managing Risk and Associated Costs,
Reduce Audit Costs,
Sarbanes Oxley (SOX),
Software,
Compliance and Redundancy.