
These issues are just the latest in a decade-long movement to enhance risk management in public companies, a trend that began in 2002 with the passage of the Sarbanes-Oxley Act (SOX). That legislation placed new requirements on companies to establish strong and sound internal control over financial reporting. Not only did it require management to report on the effectiveness of these controls, it also required attestation by the company's external auditor. For management and the board of directors at publicly held organizations, a new level of risk management and internal control was required to address financial reporting risk and remains so nine years later.
See full Article.