Achievable logoAchievable logo
CMA Part 1
Sign in
Sign up
Purchase
Textbook
Practice exams
Support
How it works
Exam catalog
Mountain with a flag at the peak
Textbook
1. External financial reporting decisions
2. Planning, budgeting, and forecasting
3. Performance management
4. Cost management
5. Internal control
5.1 Governance, risk and compliance
5.1.1 Internal control objectives and the COSO Framework
5.1.2 Responsibility for internal control and segregation of duties
5.1.3 Internal control limitations, risks, and deficiencies
5.1.4 Corporate governance structure and responsibilities
5.1.5 Corporate governance roles and responsibilities
5.1.6 External audit
5.1.7 The Sarbanes-oxley Act
5.1.8 Other regulatory bodies
5.2 System controls and security measures
6. Technology and analytics
Achievable logoAchievable logo
5.1.7 The Sarbanes-oxley Act
Achievable CMA Part 1
5. Internal control
5.1. Governance, risk and compliance
Our CMA Part 1 course is currently in development and is a work-in-progress.

The Sarbanes-oxley Act

7 min read
Font
Discuss
Share
Feedback

Learning outcome statements

The learning outcome statement relevant for this section is:

  1. describe the major internal control provisions of the Sarbanes-Oxley Act

The Sarbanes-oxley Act

The Sarbanes-Oxley Act of 2002 (SOX) is a U.S. federal law enacted in response to high-profile corporate scandals in the recent decades which eroded public trust in financial reporting. Its primary goal is to protect investors by improving the accuracy and reliability of corporate disclosures and strengthening internal controls over financial reporting.

SOX applies to all publicly traded companies in the United States, as well as wholly owned subsidiaries and foreign companies listed on U.S. stock exchanges. It also impacts accounting firms that audit these companies.

The Act is administered and enforced by several regulatory bodies, primarily the Securities and Exchange Commission (SEC) and the Public Company Accounting Oversight Board (PCAOB). The SEC oversees compliance and rulemaking, while the PCAOB establishes auditing standards and inspects the work of public accounting firms.

Below is an outline of the key titles of SOX. Please note that what follows is a high-level summary of each title, and only those most relevant to financial reporting and internal control have been discussed in detail. For a more comprehensive understanding, students are encouraged to consult the full text of the Sarbanes-Oxley Act or official regulatory guidance materials.

Title I – Public Company Accounting Oversight Board (PCAOB)

Title I of the Sarbanes-Oxley Act established the Public Company Accounting Oversight Board (PCAOB) to oversee the audits of public companies and protect investors by promoting informative, accurate, and independent audit reports. Key provisions include:

  • Creation of the PCAOB as a nonprofit corporation under the oversight of the Securities and Exchange Commission (SEC)
  • Registration requirement for all public accounting firms that prepare audit reports for publicly traded companies
  • Regular inspections of registered accounting firms to assess their compliance with auditing standards
  • Establishment of auditing, quality control, ethics, independence, and other professional standards
  • Authority to conduct investigations and disciplinary proceedings against audit firms and associated persons

This title fundamentally reshaped the regulation of the auditing profession and placed oversight in the hands of an independent authority rather than self-regulation through the profession itself.

Title II – Auditor Independence

Title II of the Sarbanes-Oxley Act contains provisions designed to preserve the independence of external auditors and reduce conflicts of interest. These rules aim to ensure that auditors maintain objectivity when evaluating a company’s financial statements. Key provisions include:

  • Prohibition on auditors providing certain non-audit services to audit clients (e.g., bookkeeping, financial information systems design, valuation services, and internal audit outsourcing)
  • Mandatory rotation of the lead audit partner every five years
  • Requirement for the audit committee to pre-approve all audit and non-audit services provided by the external auditor
  • Requirement that auditors report directly to the company’s audit committee rather than management
  • Restrictions on employment relationships, preventing key management personnel from being hired by the audit firm (and vice versa) within a certain timeframe

These measures help safeguard the integrity and impartiality of the audit process and promote confidence in the financial statements issued by public companies.

Title III – Corporate Responsibility

Title III of the Sarbanes-Oxley Act reinforces the accountability of senior executives for the accuracy and completeness of corporate financial reports. It introduces significant obligations for corporate officers to personally certify and assume responsibility for their company’s financial disclosures. Key provisions include:

  • Requirement for the Chief Executive Officer (CEO) and Chief Financial Officer (CFO) to personally certify the accuracy and completeness of financial reports submitted to the SEC (Section 302)
  • Establishment of internal control responsibilities for management, including the design, maintenance, and assessment of internal control over financial reporting
  • Prohibition of personal loans to executive officers and directors
  • Requirement for prompt disclosure of material changes in financial condition or operations
  • Penalties for noncompliance, including fines and imprisonment, for knowingly certifying misleading or inaccurate financial reports
  • Assigns responsibility to the audit committee for the appointment, compensation, and oversight of the external auditor, reinforcing the committee’s independence from management and strengthening corporate accountability.

This title aims to ensure that corporate leadership is directly accountable for the integrity of financial statements and internal control systems.

Title IV – Enhanced Financial Disclosures

Title IV focuses on increasing transparency and the reliability of financial disclosures made by public companies. It includes provisions that aim to strengthen investor confidence through improved financial reporting. Key provisions include:

  • Requirement for more timely and accurate disclosure of material changes in financial condition or operations
  • Mandatory disclosure of off-balance sheet transactions and obligations, such as operating leases and contingent liabilities
  • Enhanced disclosure of internal control effectiveness, particularly under Section 404, which requires management and external auditors to report on internal control over financial reporting
  • Accelerated reporting deadlines for financial statements and insider trading disclosures
  • Greater accountability for financial disclosures, including more rigorous certification requirements for senior executives, and the requirement for public companies to disclose whether they have adopted a code of ethics for senior financial officers, including provisions to promote honest and ethical conduct, full disclosure, and compliance with applicable laws

These measures aim to provide investors and regulators with a clearer, more complete picture of a company’s financial position and risk exposures.

Title VII – Studies and Reports

Title VII mandates various studies and reports to be conducted by government agencies and oversight bodies in order to evaluate and improve the functioning of financial markets, accounting standards, and the auditing profession. Key provisions include:

  • Requirement for the Government Accountability Office (GAO) to study the consolidation of public accounting firms and its impact on competition and audit quality
  • Mandate for the SEC to study the role and function of credit rating agencies
  • Direction for the GAO to evaluate and report on the potential effects of requiring a mandatory rotation of audit firms
  • Evaluation of the effectiveness of existing accounting and auditing standards and recommendations for improvements

These studies were intended to inform future regulatory reforms and ensure that the Sarbanes-Oxley Act remains effective in improving corporate accountability and financial reporting.

Title VIII – Corporate and Criminal Fraud Accountability

Title VIII of the Sarbanes-Oxley Act focuses on deterring and punishing corporate fraud and document tampering. It strengthens criminal penalties for fraudulent financial activity and reinforces protections for whistleblowers. Key provisions include:

  • Creation of new federal offenses for altering, destroying, or falsifying records with the intent to obstruct a federal investigation (including audit records), with penalties including fines and imprisonment of up to 20 years
  • Requirement for accountants and auditors to retain workpapers and audit documentation for a minimum of five years
  • Protection for whistleblowers who report fraudulent activities, including prohibitions on retaliation by employers
  • Enhanced penalties for mail and wire fraud related to corporate misconduct
  • Clarification that corporate officers and directors must not mislead or attempt to mislead auditors

This title emphasizes the importance of ethical conduct, transparency, and accountability in corporate reporting and audit practices.

Title X – Corporate Tax Returns

Title X contains a brief but symbolic provision intended to reinforce executive accountability. Key provision includes:

  • Requirement that the Chief Executive Officer (CEO) of each publicly traded company sign the company’s federal income tax return. This requirement highlights the personal responsibility of top executives in ensuring the accuracy and completeness of tax filings, aligning with the broader accountability principles of the Sarbanes-Oxley Act.

The Sarbanes-Oxley Act (SOX) Overview

  • Enacted to restore investor trust after corporate scandals
  • Applies to all U.S. public companies and their auditors
  • Administered by SEC and PCAOB

Title I – Public Company Accounting Oversight Board (PCAOB)

  • Established PCAOB under SEC oversight
  • Requires registration and regular inspection of audit firms
  • Sets auditing, ethics, and independence standards

Title II – Auditor Independence

  • Prohibits auditors from providing certain non-audit services to audit clients
  • Mandates lead audit partner rotation every five years
  • Audit committee must pre-approve all auditor services
  • Auditors report to audit committee, not management

Title III – Corporate Responsibility

  • CEO and CFO must personally certify financial reports (Section 302)
  • Management responsible for designing and assessing internal controls
  • Prohibits personal loans to executives and directors
  • Audit committee oversees external auditor independence

Title IV – Enhanced Financial Disclosures

  • Requires timely and accurate disclosure of material changes
  • Mandates disclosure of off-balance sheet transactions
  • Section 404: management and auditors must report on internal control effectiveness
  • Accelerated reporting deadlines and stricter executive certification

Title VII – Studies and Reports

  • GAO and SEC required to study audit firm consolidation and credit rating agencies
  • Mandates evaluation of audit firm rotation and accounting standards
  • Aims to inform future regulatory reforms

Title VIII – Corporate and Criminal Fraud Accountability

  • Criminalizes destruction or falsification of records to obstruct investigations
  • Requires retention of audit workpapers for at least five years
  • Protects whistleblowers from retaliation
  • Increases penalties for mail and wire fraud

Title X – Corporate Tax Returns

  • CEO must sign the company’s federal income tax return
  • Reinforces executive accountability for tax filings

Sign up for free to take 5 quiz questions on this topic

Previous
Next  | 5.1.8 Other regulatory bodies
All rights reserved ©2016 - 2026 Achievable, Inc.

The Sarbanes-oxley Act

Learning outcome statements

The learning outcome statement relevant for this section is:

  1. describe the major internal control provisions of the Sarbanes-Oxley Act

The Sarbanes-oxley Act

The Sarbanes-Oxley Act of 2002 (SOX) is a U.S. federal law enacted in response to high-profile corporate scandals in the recent decades which eroded public trust in financial reporting. Its primary goal is to protect investors by improving the accuracy and reliability of corporate disclosures and strengthening internal controls over financial reporting.

SOX applies to all publicly traded companies in the United States, as well as wholly owned subsidiaries and foreign companies listed on U.S. stock exchanges. It also impacts accounting firms that audit these companies.

The Act is administered and enforced by several regulatory bodies, primarily the Securities and Exchange Commission (SEC) and the Public Company Accounting Oversight Board (PCAOB). The SEC oversees compliance and rulemaking, while the PCAOB establishes auditing standards and inspects the work of public accounting firms.

Below is an outline of the key titles of SOX. Please note that what follows is a high-level summary of each title, and only those most relevant to financial reporting and internal control have been discussed in detail. For a more comprehensive understanding, students are encouraged to consult the full text of the Sarbanes-Oxley Act or official regulatory guidance materials.

Title I – Public Company Accounting Oversight Board (PCAOB)

Title I of the Sarbanes-Oxley Act established the Public Company Accounting Oversight Board (PCAOB) to oversee the audits of public companies and protect investors by promoting informative, accurate, and independent audit reports. Key provisions include:

  • Creation of the PCAOB as a nonprofit corporation under the oversight of the Securities and Exchange Commission (SEC)
  • Registration requirement for all public accounting firms that prepare audit reports for publicly traded companies
  • Regular inspections of registered accounting firms to assess their compliance with auditing standards
  • Establishment of auditing, quality control, ethics, independence, and other professional standards
  • Authority to conduct investigations and disciplinary proceedings against audit firms and associated persons

This title fundamentally reshaped the regulation of the auditing profession and placed oversight in the hands of an independent authority rather than self-regulation through the profession itself.

Title II – Auditor Independence

Title II of the Sarbanes-Oxley Act contains provisions designed to preserve the independence of external auditors and reduce conflicts of interest. These rules aim to ensure that auditors maintain objectivity when evaluating a company’s financial statements. Key provisions include:

  • Prohibition on auditors providing certain non-audit services to audit clients (e.g., bookkeeping, financial information systems design, valuation services, and internal audit outsourcing)
  • Mandatory rotation of the lead audit partner every five years
  • Requirement for the audit committee to pre-approve all audit and non-audit services provided by the external auditor
  • Requirement that auditors report directly to the company’s audit committee rather than management
  • Restrictions on employment relationships, preventing key management personnel from being hired by the audit firm (and vice versa) within a certain timeframe

These measures help safeguard the integrity and impartiality of the audit process and promote confidence in the financial statements issued by public companies.

Title III – Corporate Responsibility

Title III of the Sarbanes-Oxley Act reinforces the accountability of senior executives for the accuracy and completeness of corporate financial reports. It introduces significant obligations for corporate officers to personally certify and assume responsibility for their company’s financial disclosures. Key provisions include:

  • Requirement for the Chief Executive Officer (CEO) and Chief Financial Officer (CFO) to personally certify the accuracy and completeness of financial reports submitted to the SEC (Section 302)
  • Establishment of internal control responsibilities for management, including the design, maintenance, and assessment of internal control over financial reporting
  • Prohibition of personal loans to executive officers and directors
  • Requirement for prompt disclosure of material changes in financial condition or operations
  • Penalties for noncompliance, including fines and imprisonment, for knowingly certifying misleading or inaccurate financial reports
  • Assigns responsibility to the audit committee for the appointment, compensation, and oversight of the external auditor, reinforcing the committee’s independence from management and strengthening corporate accountability.

This title aims to ensure that corporate leadership is directly accountable for the integrity of financial statements and internal control systems.

Title IV – Enhanced Financial Disclosures

Title IV focuses on increasing transparency and the reliability of financial disclosures made by public companies. It includes provisions that aim to strengthen investor confidence through improved financial reporting. Key provisions include:

  • Requirement for more timely and accurate disclosure of material changes in financial condition or operations
  • Mandatory disclosure of off-balance sheet transactions and obligations, such as operating leases and contingent liabilities
  • Enhanced disclosure of internal control effectiveness, particularly under Section 404, which requires management and external auditors to report on internal control over financial reporting
  • Accelerated reporting deadlines for financial statements and insider trading disclosures
  • Greater accountability for financial disclosures, including more rigorous certification requirements for senior executives, and the requirement for public companies to disclose whether they have adopted a code of ethics for senior financial officers, including provisions to promote honest and ethical conduct, full disclosure, and compliance with applicable laws

These measures aim to provide investors and regulators with a clearer, more complete picture of a company’s financial position and risk exposures.

Title VII – Studies and Reports

Title VII mandates various studies and reports to be conducted by government agencies and oversight bodies in order to evaluate and improve the functioning of financial markets, accounting standards, and the auditing profession. Key provisions include:

  • Requirement for the Government Accountability Office (GAO) to study the consolidation of public accounting firms and its impact on competition and audit quality
  • Mandate for the SEC to study the role and function of credit rating agencies
  • Direction for the GAO to evaluate and report on the potential effects of requiring a mandatory rotation of audit firms
  • Evaluation of the effectiveness of existing accounting and auditing standards and recommendations for improvements

These studies were intended to inform future regulatory reforms and ensure that the Sarbanes-Oxley Act remains effective in improving corporate accountability and financial reporting.

Title VIII – Corporate and Criminal Fraud Accountability

Title VIII of the Sarbanes-Oxley Act focuses on deterring and punishing corporate fraud and document tampering. It strengthens criminal penalties for fraudulent financial activity and reinforces protections for whistleblowers. Key provisions include:

  • Creation of new federal offenses for altering, destroying, or falsifying records with the intent to obstruct a federal investigation (including audit records), with penalties including fines and imprisonment of up to 20 years
  • Requirement for accountants and auditors to retain workpapers and audit documentation for a minimum of five years
  • Protection for whistleblowers who report fraudulent activities, including prohibitions on retaliation by employers
  • Enhanced penalties for mail and wire fraud related to corporate misconduct
  • Clarification that corporate officers and directors must not mislead or attempt to mislead auditors

This title emphasizes the importance of ethical conduct, transparency, and accountability in corporate reporting and audit practices.

Title X – Corporate Tax Returns

Title X contains a brief but symbolic provision intended to reinforce executive accountability. Key provision includes:

  • Requirement that the Chief Executive Officer (CEO) of each publicly traded company sign the company’s federal income tax return. This requirement highlights the personal responsibility of top executives in ensuring the accuracy and completeness of tax filings, aligning with the broader accountability principles of the Sarbanes-Oxley Act.
Key points

The Sarbanes-Oxley Act (SOX) Overview

  • Enacted to restore investor trust after corporate scandals
  • Applies to all U.S. public companies and their auditors
  • Administered by SEC and PCAOB

Title I – Public Company Accounting Oversight Board (PCAOB)

  • Established PCAOB under SEC oversight
  • Requires registration and regular inspection of audit firms
  • Sets auditing, ethics, and independence standards

Title II – Auditor Independence

  • Prohibits auditors from providing certain non-audit services to audit clients
  • Mandates lead audit partner rotation every five years
  • Audit committee must pre-approve all auditor services
  • Auditors report to audit committee, not management

Title III – Corporate Responsibility

  • CEO and CFO must personally certify financial reports (Section 302)
  • Management responsible for designing and assessing internal controls
  • Prohibits personal loans to executives and directors
  • Audit committee oversees external auditor independence

Title IV – Enhanced Financial Disclosures

  • Requires timely and accurate disclosure of material changes
  • Mandates disclosure of off-balance sheet transactions
  • Section 404: management and auditors must report on internal control effectiveness
  • Accelerated reporting deadlines and stricter executive certification

Title VII – Studies and Reports

  • GAO and SEC required to study audit firm consolidation and credit rating agencies
  • Mandates evaluation of audit firm rotation and accounting standards
  • Aims to inform future regulatory reforms

Title VIII – Corporate and Criminal Fraud Accountability

  • Criminalizes destruction or falsification of records to obstruct investigations
  • Requires retention of audit workpapers for at least five years
  • Protects whistleblowers from retaliation
  • Increases penalties for mail and wire fraud

Title X – Corporate Tax Returns

  • CEO must sign the company’s federal income tax return
  • Reinforces executive accountability for tax filings

More from Governance, risk and compliance

  • Internal control objectives and the COSO Framework
  • Responsibility for internal control and segregation of duties
  • Internal control limitations, risks, and deficiencies
  • Corporate governance structure and responsibilities
  • Corporate governance roles and responsibilities