Look Beyond Sarbanes-Oxley to Maximize ROI from Compliance Initiatives

摘要

In the race to achieve Sarbanes-Oxley compliance, companies have two fundamental choices: view the mandate as a costly but necessary evil and do the minimum necessary to achieve compliance, or use it as an opportunity to improve overall risk management and business performance. While compliance with the Sarbanes-Oxley Act makes perfect sense as a short-term objective, organizations must take a broader view of operational risk to achieve long-term return on investment (ROI) from their compliance initiatives. Sarbanes-Oxley is one element within an overall general compliance program; an organization must also consider the US Patriot Act, the Health Insurance Portability and Accountability Act (HIPAA) and other industry regulations. To this end, forward-thinking companies recognize the need to comply with the regulations and legislation that affect them today, and establish shareholder value by laying the groundwork for the future.