Regulated companies will face increased scrutiny, demands for transparency, and regulatory pressures that are destined to drive up the cost of compliance for every company, regardless of stature. And given the accuracy of my crystal ball — it did forecast the Yankees win over the Phillies, much to my chagrin — compliance costs will go up relative to the growth of business and actually grow faster than the acceleration of business into the next decade, through 2020.
That's not good news, but this is: There has been some decline in the costs of regulatory reporting because of the maturity of the compliance reporting environments. At least that's what the Securities and Exchange Commission found in its September 2009 report, “Study of the Sarbanes-Oxley Act of 2002 Section 404 Internal Control over Financial Reporting Requirements.”
The SEC report basically assesses the efficacy of reforms introduced in 2007 designed to reduce the costs of complying with Section 404, which were “generally viewed as being unexpectedly high.” The assessment itself is based on a survey of financial executives of companies with Section 404 experience, and according to these executives, companies are seeing more cost-effective internal controls evaluations and audits. In particular, they are seeing reductions in internal labor costs, external audit fees, consultant costs and non-labor or software costs.
Of course, everybody now wants to know, will those costs be replaced by other reporting costs? I don't think so. The change in activities for companies subject to Section 404 is generating additional, favorable results for corporations, not due to costs, but due to a reduction in the number of risks and controls that are subject to testing. Standardization is driving down costs associated with testing risk and controls. We have seen some reduction in deficiencies and material weaknesses for companies. And a lot of companies are internalizing Section 404 reporting rather than relying on external sources, partly because those sources are quite expensive.
In addition to cost reductions, the SEC study reveals some of the most widely reported benefits of compliance including improvements in:
- the quality of the respondent company's internal control structure
- the audit committee's confidence in the company's internal control over financial reporting
- the quality of the company's financial reporting
- the company's ability to prevent and detect fraud
- the respondent's confidence in the financial reports of other companies complying with Section 404
Other reported benefits include improvements in the company's ability to raise capital, investor confidence in the company's financial reports, the company's overall firm value, and the liquidity of the company's common stock.The SEC report findings align nicely with the mission I've been on to automate compliance reporting. Companies can lower their costs and improve confidence in their financial projections. In turn, they have fewer material weaknesses, fewer audit issues. They have an easier time raising money and establishing confidence in the investor markets and the stock markets.
Yes, the 2007 SOX reforms are helping companies to cut their Section 404 costs and realize additional benefits. Automating compliance reporting with software that continuously monitors application-specific data and controls continuous monitoring technology, amplifies those benefits across the board.
For a lot of companies, 2010 is the year to start turning regulatory lemons into compliance lemonade. The SEC has already done its part by providing the SOX regs. Same with the Defense Contract Audit Agency and other regulating bodies. Now, it's time to add the sugar — automation.
Automation is key to driving down audit and compliance reporting costs and getting a better handle on your requirements. Why wait for the SEC or some other organization to reign in the costs associated with adhering to its rules and regulations? Automation puts your company's financial destiny in your hands. And automating can help any company reach its objectives for 2010 if they include cost savings as well as improved internal controls, governance, and the other benefits reported above.