{"id":1545,"date":"2014-04-07T12:01:14","date_gmt":"2014-04-07T12:01:14","guid":{"rendered":"https:\/\/www.peeriosity.com\/shared-services\/articles\/?p=1545"},"modified":"2022-05-12T09:33:56","modified_gmt":"2022-05-12T09:33:56","slug":"the-role-of-shared-services-in-sarbanes-oxley-testing","status":"publish","type":"post","link":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/","title":{"rendered":"The Role of Shared Services in Sarbanes-Oxley Testing"},"content":{"rendered":"

The Sarbanes-Oxley Act of 2002 added new requirements for public companies doing business in the United States to ensure the accuracy and integrity of financial information.\u00a0 <\/span>Since the implementation of Sarbanes-Oxley (SOX), many other countries passed similar reforms, with each company determining the optimal structure for meeting compliance requirements.\u00a0 <\/span>With Shared Services often being the major processing hub for a company\u2019s financial transactions, it is not a surprise that it often takes on an important role when it comes to Sarbanes-Oxley compliance<\/a>.<\/span><\/p>\n

A Peeriosity member representing a $15B+ global food processing company was considering options for centralizing Sarbanes-Oxley testing in Shared Services and wanted to know how the activity was managed at other companies. \u00a0<\/span>Within 24 hours, member companies responded to his iPollingTM<\/sup> questions, with many providing additional comments to explain their responses.\u00a0 <\/span>The member was then able to follow up directly with each company, as needed, to further discuss approaches.<\/span><\/p>\n

According to the iPolling results, approximately one in five companies have SOX testing being managed by Shared Services<\/a>.\u00a0 <\/span>Other public companies are fairly evenly split between each process area being responsible for testing in their area and having a separate internal controls team (often Internal Audit<\/a>) that is outside of Shared Services with overall responsibility for testing.\u00a0 <\/span><\/span><\/p>\n

When reviewing the many poll response comments (a summary is below) it becomes clear that, even when Shared Services doesn\u2019t have overall responsibility, because much of the activity is within Shared Services, the organization plays an important role in ensuring compliance with Sarbanes-Oxley requirements.\u00a0 <\/span>And, with self-assessment techniques being a very common approach, Shared Services often plays a critical compliance role for much of the activity in scope for review, even when another area has overall responsibility.<\/span><\/p>\n

\u00a0<\/span>\"\"<\/p>\n

Regarding the question of SOX testing frequency, 40% perform testing annually and 29% perform testing twice a year, with 23% testing quarterly and only 8% testing on a monthly basis. <\/span><\/p>\n

\u00a0<\/span>\"\"<\/p>\n

As mentioned above, additional comments included with poll responses help to clarify the approaches at member companies.\u00a0 <\/span>Here are some of the comments:<\/span><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Internal Audit performs Sarbanes-Oxley testing.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>To create proportional ownership, people in each process area are responsible for self-testing.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Internal Audit Department handles.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>We have an independent team within Shared Services that performs self-testing throughout the year for any processes already handed over. Individuals in the process areas cover activities that are not handled by Shared Services. Corporate Internal Audit and audit firm perform independent testing once a year from October to November.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Sarbanes-Oxley controls are tiered into multiple levels. Certain tiers are tested in certain quarters by the process owners and documented in the self-assessment application. We have a Financial Controls team that is our Sarbanes-Oxley team, which is part of an Audit Services & Controls (not Shared Services) team that owns the testing process, the self-assessment application, and reporting responsibilities.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>All Sarbanes-Oxley-related testing is performed by Internal Audit to maximize our external auditor\u2019s reliance on our work. All in-scope areas are tested annually, with the more financially material testing being done in Q4 to minimize roll-forward testing.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>We have a mixed approach — individuals in the various process areas throughout the company are responsible for testing for Sarbanes-Oxley compliance annually (and a large percentage of this is within our Shared Services operations because we are responsible for most of the Sarbanes-Oxley-relevant processes.) But we also have an Internal Controls team (outside of Shared Services) that audits the testing. Within our Shared Services groups, we usually have Sarbanes-Oxley-focused internal audits about every other year.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>We use a small team for Sarbanes-Oxley testing that is comprised of Shared Services individuals, Corporate individuals, and 3rd party for certain controls.<\/span><\/em><\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>We have a Sarbanes-Oxley team, so testing is mainly done by them. The frequency is typically one interim testing period and one final testing period in a calendar year.<\/span><\/em><\/p>\n

\u00a0<\/span><\/p>\n

How is Sarbanes-Oxley testing managed at your company?\u00a0 <\/span>What is the testing frequency and what role does Shared Services<\/a> play to ensure compliance?<\/span><\/p>\n

Who are your<\/em><\/span> peers and how are you collaborating with them?<\/span><\/p>\n

\n

\u00a0<\/span><\/p>\n<\/div>\n

\u00a0<\/span><\/p>\n

\u00a0<\/span><\/span><\/sup>\u201ciPollingTM<\/sup>\u201d is available exclusively to Peeriosity member company employees, with consultants or vendors prohibited from participating or accessing content. Members have full visibility of all respondents and their comments. <\/span>Using Peeriosity\u2019s integrated email system, Peer MailTM<\/sup>, members can easily communicate at any time with others who participate in iPolling. <\/span><\/p>\n

\u00a0<\/span><\/p>\n

\n

Peeriosity members are invited to log into <\/span>www.peeriosity.com<\/span><\/a><\/span> to join the discussion and connect with Peers.\u00a0\u00a0 <\/span>Membership is for practitioners only, with no consultants or vendors permitted.\u00a0 <\/span>To learn more about Peeriosity, <\/span>click here<\/span><\/a><\/span>.<\/span><\/p>\n<\/div>\n

<\/div>\n

<\/span><\/span><\/span><\/p>","protected":false},"excerpt":{"rendered":"

The Sarbanes-Oxley Act of 2002 added new requirements for public companies doing business in the United States to ensure the accuracy and integrity of financial information.\u00a0 Since the implementation of Sarbanes-Oxley (SOX), many other countries passed similar reforms, with each company determining the optimal structure for meeting compliance requirements.\u00a0 With Shared Services often being the […]<\/p>\n

<\/span><\/span><\/span><\/p>","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[8],"tags":[],"acf":[],"yoast_head":"\nSarbanes-Oxley Testing: The Role of Shared Services | Peeriosity, LLC<\/title>\n<meta name=\"description\" content=\"Shared Services, the major processing hub for a company\u2019s transactions, takes on a critical role when it comes to Sarbanes-Oxley testing.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Role of Shared Services in Sarbanes-Oxley Testing\" \/>\n<meta property=\"og:description\" content=\"Shared Services, the major processing hub for a company\u2019s transactions, takes on a critical role when it comes to Sarbanes-Oxley testing.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/\" \/>\n<meta property=\"og:site_name\" content=\"Peeriosity\" \/>\n<meta property=\"article:published_time\" content=\"2014-04-07T12:01:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-05-12T09:33:56+00:00\" \/>\n<meta name=\"author\" content=\"Peeriosity\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Peeriosity\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/\",\"url\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/\",\"name\":\"Sarbanes-Oxley Testing: The Role of Shared Services | Peeriosity, LLC\",\"isPartOf\":{\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website\"},\"datePublished\":\"2014-04-07T12:01:14+00:00\",\"dateModified\":\"2022-05-12T09:33:56+00:00\",\"author\":{\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/2f958fda27bcb7a0a07ed284f5d6b634\"},\"description\":\"Shared Services, the major processing hub for a company\u2019s transactions, takes on a critical role when it comes to Sarbanes-Oxley testing.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Role of Shared Services in Sarbanes-Oxley Testing\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website\",\"url\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/\",\"name\":\"Peeriosity\",\"description\":\"Peeriosity Research\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/2f958fda27bcb7a0a07ed284f5d6b634\",\"name\":\"Peeriosity\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/246cadb9b3a1cd5f20797ba770c7b1e1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/246cadb9b3a1cd5f20797ba770c7b1e1?s=96&d=mm&r=g\",\"caption\":\"Peeriosity\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Sarbanes-Oxley Testing: The Role of Shared Services | Peeriosity, LLC","description":"Shared Services, the major processing hub for a company\u2019s transactions, takes on a critical role when it comes to Sarbanes-Oxley testing.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/","og_locale":"en_US","og_type":"article","og_title":"The Role of Shared Services in Sarbanes-Oxley Testing","og_description":"Shared Services, the major processing hub for a company\u2019s transactions, takes on a critical role when it comes to Sarbanes-Oxley testing.","og_url":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/","og_site_name":"Peeriosity","article_published_time":"2014-04-07T12:01:14+00:00","article_modified_time":"2022-05-12T09:33:56+00:00","author":"Peeriosity","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Peeriosity","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/","url":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/","name":"Sarbanes-Oxley Testing: The Role of Shared Services | Peeriosity, LLC","isPartOf":{"@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website"},"datePublished":"2014-04-07T12:01:14+00:00","dateModified":"2022-05-12T09:33:56+00:00","author":{"@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/2f958fda27bcb7a0a07ed284f5d6b634"},"description":"Shared Services, the major processing hub for a company\u2019s transactions, takes on a critical role when it comes to Sarbanes-Oxley testing.","breadcrumb":{"@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/2014\/04\/the-role-of-shared-services-in-sarbanes-oxley-testing\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.peeriosity.com\/shared-services\/articles\/"},{"@type":"ListItem","position":2,"name":"The Role of Shared Services in Sarbanes-Oxley Testing"}]},{"@type":"WebSite","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#website","url":"https:\/\/www.peeriosity.com\/shared-services\/articles\/","name":"Peeriosity","description":"Peeriosity Research","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.peeriosity.com\/shared-services\/articles\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/2f958fda27bcb7a0a07ed284f5d6b634","name":"Peeriosity","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.peeriosity.com\/shared-services\/articles\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/246cadb9b3a1cd5f20797ba770c7b1e1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/246cadb9b3a1cd5f20797ba770c7b1e1?s=96&d=mm&r=g","caption":"Peeriosity"}}]}},"_links":{"self":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts\/1545"}],"collection":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/comments?post=1545"}],"version-history":[{"count":9,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts\/1545\/revisions"}],"predecessor-version":[{"id":5236,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/posts\/1545\/revisions\/5236"}],"wp:attachment":[{"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/media?parent=1545"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/categories?post=1545"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.peeriosity.com\/shared-services\/articles\/wp-json\/wp\/v2\/tags?post=1545"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}