Rising SOX Compliance Hours and Costs Underscore Need for Technology Enablement, Finds New Protiviti Survey

MENLO PARK, Calif., June 15, 2021 /PRNewswire/ -- The twelfth annual Sarbanes-Oxley (SOX) Compliance Survey, conducted by global consulting firm Protiviti, finds that 65% of respondents who reported an increase in their SOX compliance hours said those hours increased by more than 10% over the prior year. Rising SOX compliance hours coupled with the COVID-19 pandemic accelerated the continued need to deploy technology and automation within compliance processes as well as to look for synergies with other organizational initiatives to enable greater efficiencies.

While most organizations continue to spend more hours on their SOX compliance activities year-over-year, "digital leaders," – those organizations that have higher levels of maturity in the use of technology and innovative practices – have reported experiencing a lesser impact of increasing hours, which suggests they are gaining advantages through their greater use of technology (including automation) in the SOX compliance process. Fifty-one percent of survey respondents utilized technology tools, such as automated workflow technology and audit management software, in the testing of controls for their fiscal year, marking a yearly increase of 5%. Still, many companies, even digital leaders, are early in their adoption of technology and will continue to realize more efficiencies going forward.

Overcoming Adoption Hurdles
The survey reveals that while 78% of digital leaders have moderate to significant plans to further automate their manual processes and controls within their fiscal year, the same is true for only 57% of "digital laggards." The findings uncovered the top challenges inhibiting these organizations from deploying automation in their SOX compliance processes, including: lack of time to spend on exploring automation; the misconception that certain areas of the SOX control environment are not conducive to automation; and a lack of funding and executive support.

"While audit teams are eager to make SOX compliance and other regulatory requirements less manually intensive through automation so that they will have more capacity to focus on higher-level strategic tasks, we're finding that the majority don't know where to start, especially without buy-in from their senior leaders," said Brian Christensen, executive vice president and global leader of Protiviti's internal audit and financial advisory practice. "We've found that the best way to begin and demonstrate the clear, bottom-line value that automation tools deliver in regulatory compliance processes is to start small: identify a simple, small-scale process to automate and present the use case to leadership to pave the way for broader applications across the organization."

Among the survey respondents currently leveraging technology in their organization's SOX compliance processes, the following applications –– given their simplicity and accessibility – were indicated to be optimal starting points to equip SOX compliance teams with positive use cases:

• IT application controls (43%)
• Accounts payable process (42%)
• IT general controls (41%)
• Account reconciliation process (37%)

"In addition to these use case areas, we find that organizations realize benefits through automation in other areas, including evidence gathering and interactions with audit, risk and compliance platforms – for example, in uploading completed work papers and evidence documents," said Andrew Struthers-Kennedy, a Protiviti managing director and leader of the firm's IT audit practice.

"SOX teams should take every opportunity to explore and evaluate how to make increased use of data and technology. Organizations that have committed time and effort to doing this have been able to realize a broad range of benefits beyond efficiency improvement, including increased coverage, real-time monitoring capabilities, talent upskilling and team member job satisfaction, to name a few," added Struthers-Kennedy.

The Protiviti report, titled "SOX Compliance and the Promise of Technology and Automation," is based on a survey of more than 650 audit, compliance and finance leaders and professionals, representing a wide range of industries. The survey was conducted with support from AuditBoard, a leading cloud-based audit, risk and compliance management platform, during the first quarter of 2021. Protiviti and AuditBoard formed an alliance in 2019 to collaborate in providing organizations with a comprehensive solution of software, consulting and thought leadership for advancing their SOX and internal audit initiatives.

Survey Resources Available
The survey report is available for complimentary download here. Additionally, an infographic and a podcast featuring Protiviti's Kristen Kelly, director, and Angelo Poulikakos, managing director, discussing key survey findings are also available on the web page. Protiviti and AuditBoard will conduct a free 60-minute webinar on June 17 at 10:00 a.m. PDT with Christensen and Kelly along with Scott Madenburg, market advisor, AuditBoard and Jeremy Wildhaber, director, Protiviti, to further explore the study's results and the impact of the pandemic on SOX compliance processes. To attend the webinar, please register here.

About Protiviti
Protiviti (www.protiviti.com) is a global consulting firm that delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to help leaders confidently face the future. Protiviti and our independent and locally owned Member Firms provide clients with consulting and managed solutions in finance, technology, operations, data, analytics, governance, risk and internal audit through our network of more than 85 offices in over 25 countries.

Named to the 2021 Fortune 100 Best Companies to Work For^® list, Protiviti has served more than 60 percent of Fortune 1000 and 35 percent of Fortune Global 500 companies. The firm also works with smaller, growing companies, including those looking to go public, as well as with government agencies. Protiviti is a wholly owned subsidiary of Robert Half (NYSE: RHI). Founded in 1948, Robert Half is a member of the S&P 500 index.

Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services.

Editor's note: an infographic of survey highlights (in PDF or JPEG formats) and photos are available upon request.

SOURCE Protiviti

Related Links

http://www.protiviti.com