Top 5 SOX Best Practices for Small Companies

By Cozad, Matthew A. | Strategic Finance, October 2005 | Go to article overview

Top 5 SOX Best Practices for Small Companies

Cozad, Matthew A., Strategic Finance

WHILE most large and medium-sized companies have finished their first round of compliance, smaller businesses are still working on the provisions of Section 404 of the Sarbanes-Oxley Act of 2002 (SOX). I have been helping clients with SOX compliance since 2003, and, in working closely with management, I have found two challenging areas. The first is evaluating the design of internal controls, and the second is promoting the idea that, in general, the implementation of effective internal controls and/or processes could provide the company increased processing efficiencies and potential cost savings. Never mind SOX--how much time and money could a company save if management knew they could take proactive steps to implement key controls around significant processes? In 2004, how many companies had to test the same key controls multiple times before the operation of control appeared "effective?" How much more time and how many more resources did it take for the company to perform this undertaking?

In a survey about SOX compliance, internal auditors said that a company's three most common control issues were a lack of process control-related documentation, formal review and approval gaps, and not enough or proper segregation of duties. In light of these and other SOX compliance issues and concerns, five cost-saving opportunities have emerged that should enable smaller companies, who will be required to comply with SOX in 2006, to jump ahead of the learning curve and incorporate some valuable procedures and controls that will help them operate more efficiently and effectively.

1 Take Advantage of Checklists

The importance of a checklist expands beyond providing evidence about the performance of a key control; it clearly defines the scope of an employee's job responsibility and adds accountability. Realizing that clients struggle with showing they maintain clear audit trails for reviews, reconciliations, verifications, and other transactions, I have recommended that management use checklists to support employee accountability and to document the performance of key control activities. Moreover, I have seen smaller companies with less savvy IT operations come to appreciate the fact that paper checklists can reduce or eliminate their need to maintain volumes of paper to document reviews and approvals. Checklists also give management the ability to monitor whether recurring processes and tasks are completed on time. An example of a common checklist is a summary listing of all month-end journal entries that the preparer and reviewer initial and date to show evidence that the review and approval process was performed. The checklist is then included in the journal entry binder. The same type of checklist can be used for quarter-end financial statement preparation and review procedures, scheduled tax filings, etc.

In helping companies walk through and document significant processes, I have found that it becomes relatively easy to identify those controls that can be incorporated into monthly or quarterly checklists. In addition to the monthly or quarterly journal entries, some of the most useful checklists are for complex invoice reviews/reconciliations, budget-to-actual variance analyses, and quarterly/ annual financial statement reporting processes.

2 Update Policies and Procedures

Existing policies and procedures serve as building blocks for SOX process documentation and define employees' roles and responsibilities. Once companies have identified significant SOX processes, documentation begins with evaluating those existing policies and procedures. The SOX documentation process is the most practical time to recommend ways to update any outdated or inadequate policies and procedures to avoid future pitfalls or control deficiencies.

One good example is recommending that management update their travel and reimbursement policy to account for changes in IRS regulations (de minimis thresholds).

The rest of this article is only available to active members of Questia

Sign up now for a free, 1-day trial and receive full access to:

  • Questia's entire collection
  • Automatic bibliography creation
  • More helpful research tools like notes, citations, and highlights
  • Ad-free environment

Already a member? Log in now.

Notes for this article

Add a new note
If you are trying to select text to create highlights or citations, remember that you must now click or tap on the first word, and then click or tap on the last word.
One moment ...
Project items

Items saved from this article

This article has been saved
Highlights (0)
Some of your highlights are legacy items.

Highlights saved before July 30, 2012 will not be displayed on their respective source pages.

You can easily re-create the highlights by opening the book page or article, selecting the text, and clicking “Highlight.”

Citations (0)
Some of your citations are legacy items.

Any citation created before July 30, 2012 will labeled as a “Cited page.” New citations will be saved as cited passages, pages or articles.

We also added the ability to view new citations from your projects or the book or article where you created them.

Notes (0)
Bookmarks (0)

You have no saved items from this article

Project items include:
  • Saved book/article
  • Highlights
  • Quotes/citations
  • Notes
  • Bookmarks
Cite this article

Cited article

Citations are available only to our active members.
Sign up now to cite pages or passages in MLA, APA and Chicago citation styles.

(Einhorn, 1992, p. 25)

(Einhorn 25)


1. Lois J. Einhorn, Abraham Lincoln, the Orator: Penetrating the Lincoln Legend (Westport, CT: Greenwood Press, 1992), 25,

Cited article

Top 5 SOX Best Practices for Small Companies


Text size Smaller Larger
Search within

Search within this article

Look up

Look up a word

  • Dictionary
  • Thesaurus
Please submit a word or phrase above.
Print this page

Print this page

Why can't I print more than one page at a time?

Full screen

matching results for page

Cited passage

Citations are available only to our active members.
Sign up now to cite pages or passages in MLA, APA and Chicago citation styles.

"Portraying himself as an honest, ordinary person helped Lincoln identify with his audiences." (Einhorn, 1992, p. 25).

"Portraying himself as an honest, ordinary person helped Lincoln identify with his audiences." (Einhorn 25)

"Portraying himself as an honest, ordinary person helped Lincoln identify with his audiences."1

1. Lois J. Einhorn, Abraham Lincoln, the Orator: Penetrating the Lincoln Legend (Westport, CT: Greenwood Press, 1992), 25,

Cited passage

Welcome to the new Questia Reader

The Questia Reader has been updated to provide you with an even better online reading experience.  It is now 100% Responsive, which means you can read our books and articles on any sized device you wish.  All of your favorite tools like notes, highlights, and citations are still here, but the way you select text has been updated to be easier to use, especially on touchscreen devices.  Here's how:

1. Click or tap the first word you want to select.
2. Click or tap the last word you want to select.

OK, got it!

Thanks for trying Questia!

Please continue trying out our research tools, but please note, full functionality is available only to our active members.

Your work will be lost once you leave this Web page.

For full access in an ad-free environment, sign up now for a FREE, 1-day trial.

Already a member? Log in now.