SOX Compliance in Credit & Collections

A lot of folks are focused on SOX (Sarbanes-Oxley) compliance.  And some of these folks are actually the companies trying to go through the SOX compliance process.  The fact of the matter is that there are a myriad of companies out there looking to sell products or services around meeting SOX requirements.

Now, I think that although automation software and audit & compliance services are important, companies really need to look at different processes within the enterprise to accurately judge what they need.  Many times, improvements in their internal business processes can go a long way towards achieving compliance.  Today's post is going to focus on setting up internal controls around the accounts receivable, credit & collections functions.

Although all of this rolls up into a COSO framework (stay tuned for a future posting), some of the things that are critical to address are identifying controls and ensuring testing of these controls for every aspect of the Customer-to-Cash process:

1. Order Processing: You need segregation of duties in the order entry and management process.  Many times, this can be set up in the ERP system with authorization levels for different transactions

2. Accounts Receivable: many things need to be controlled here, but specifically credit memos and write-offs need to be only authorized by appropriate management approval.  Additionally there have to be segregation of duties in different functions of A/R

3. Credit Management: you probably shouldn't have the same folks assigning credit limits as those applying cash and performing post-payment activities.  More and more companies are looking to segregate, monitor and control these activities

4. Cash receipts: cash application from the lockbox has to be as automated as possible (it helps your hit-rate too).  Additionally, a set of reconciliation acitivities have to take place between payment transactions and the banking records.

Finally, you have to have a reat internal control plan, documentation, test plans and a remediation plan when infractions occur.

Its pretty clear that process changes have to go hand in hand with technology and personnel training for companies to be successful in their SOX compliance efforts.

Comments

[Rich]

Hi,
I have a related blog and wanted to know if you'd be interested in doing a link exchange/blogroll with me.
Mine is: http://cashflownotesguide.com
Title: Cash Flow Notes Guide
If you are willing, to make it simple, just go ahead and add my link to your site-then email me and I will reciprocate within 24 hours.
Thanks and I hope to hear back from you,
Rich
awundrin@gmailcom

[Economy]

Hey
sory to write to you like this, but i could not find the contact form. I really like your blog and i was wondering if you would maybe like a link exchange with my website www.sayeconomy.com . My site has many good articles and gets around 1300 different visitors each day. I think we would both benefit out of this exchange alot. We would get higher position in search engines and many new visitors from each others economy sites.

Well let me know on info@sayeconomy.com . I would really like a link exchange with your blog (i like it alot).

Thank you in advance for your reply.

Cheers,
Matt