Friday, January 06, 2006

The role of IT in Sarbanes-Oxley Section 404


If you have been following the news recently, you have probably heard about the collapse of Refco, the commodities trading firm that filed for bankruptcy after being accused of allegedly hiding a $430 million bad debt from its shareholders.

Refco's CEO has been arrested, and while his innocence or guilt remains to be determined, Refco provides us with an excellent opportunity to understand the serious interdependencies between IT and Sarbanes Oxley compliance.

Some background: Refco went public in August, 2005, and was warmly received by the market despite the fact that its auditors noted deficiencies in its internal controls and financial staff. Per the Sarbanes Oxley Act, these deficiencies would need to be rectified as Refco complied with disclosure rules set by the SEC. However, before that cycle could even commence, an internal auditor discovered the notorious alleged $430 bad debt. What the auditor actually found was the receipt of an interest payment from a client that appeared to be too high for the actual loan balance that the client was carrying. An experienced auditor observing the Refco disaster in the press stated that finding such a discrepancy in a company the size of Refco was not like "finding a needle in a haystack." It was like "find a needle in a stack of needles."

See full Article.