I got asked a question about the impact of budget cuts on PPM efforts and through my usual circuitous thought process I ended up wondering if anyone was seeing a significant reduction in the largely unnecessary SOX compliance process that IT has been laboring under.
Obviously the above statement is one that some people will disagree with BUT I’ve actually read the official SOX material and I am a finance person by training and profession so I believe I understand what it means to show control over Financial Reporting (the answer lies in the Foreign Corrupt Pactices Act). I also know that I watched IT departments unnecessarily increase the cost of all of their projects to comply with a ruling that didn’t need to be applied across the board.
Obviously this is a bit of a rant, but as a finance person at heart I simply go nuts at companies wasting hard eared money for no reason except fear of non-compliance. On a postive note I do know of one company that reduced their SOX control-points from 32 to 3 and another company that went from 23 to 11. Since I’m quoting from a cocktail party conversation I don’t have details on what they cut and what they kept but I’m guessing that somewhere between 3 and 11 control-points is much closer to whta’s appropriate than 20 to 30. So I’m curious whether or not anyone is changing anything. I think it’s a great way to save money without breaking anything but politics and fear can be powerful deterents and I’m not sure which way the prevailing winds are blowing. Comments from anyone?
