Implementing section 404 of the sarbanes oxley act: Recommendations for information systems organizations

Section 404 of the Sarbanes Oxley (SOX) Act addresses the effectiveness of internal controls, which in most organizations are either fully or partially automated due to the pervasiveness and ubiquity of information technologies. Significant or material control deficiencies have to be reported publicly. The adverse impact on organizations declaring deficiencies can be severe, for example, damage to reputation and/or market value. While there are many practitioner-led manuals and methods for dealing with 404, there has been little published in the academic research literature investigating the role of Information Systems organizations in implementing Section 404. The paper addresses this gap in knowledge. We used institutional theory as the lens through which to examine the experiences of Section 404 implementation in three global organizations. We used the case study method and an abductive strategy to gather and analyze data respectively. Our findings are summarized in six recommendations. We found that institutional pressures play a critical role in the implementation of Section 404. In particular, organizations face coercive pressure to achieve Section 404 compliance, without which punitive sanctions can be imposed by regulators. Organizations tend to imitate one another in the methods they use so that each is perceived to be in line with their competitive environment. Organizations face normative pressures to act in ways that are socially acceptable, which is to achieve compliance. Failure to do so would be a signal to the market that the organization does not take controls seriously. We expand these findings in terms of power and influence tactics that IS organizations can use when implementing Section 404. Our findings provide directions for practice and lines of enquiry for further research

Understanding the Drivers of Sustainable Entrepreneurial Practices in Pakistan’s Leather Industry: A Multi-Level Approach

Purpose: The main objective is to analyse the drivers of sustainable entrepreneurial practices in SMEs operating in a developing economy. The secondary objectives are to explore the relationship between these drivers and to draw out the implications for policy and practice. Design/methodology/approach: The research is informed by the literature on sustainable entrepreneurship, and on the drivers of pro-environmental practices in SMEs. It reports on the results of an intensive multi-level empirical study, which investigates the environmental practices of SMEs in Pakistan’s leatherworking industry using a multiple case study design and grounded analysis, which draws on relevant institutional theory. Findings: The study identifies that coercive, normative and mimetic isomorphic pressures simultaneously drive sustainable entrepreneurial activity in the majority of sample SMEs. These pressures are exerted by specific micro, meso and macro level factors, ranging from international customers’ requirements to individual-level values of owners and managers. It also reveals the catalytic effect of the educational and awareness-raising activities of intermediary organisations, in tandem with the attraction of competitiveness gains, (international) environmental regulations, industrial dynamism and reputational factors. Practical implications: The evidence suggests that, in countries where formal institutional mechanisms have less of an impact, intermediary organisations can perform a proto-institutional role that helps to overcome pre-existing barriers to environmental improvement by sparking sustainable entrepreneurial activity in SME populations. Originality/value: The findings imply that the drivers of sustainable entrepreneurial activity do not operate in a ‘piecemeal’ fashion, but that particular factors mediate the emergence and development of other sustainability drivers. This paper provides new insights into sustainable entrepreneurship and motivations for environmental practices in an under-researched developing economy context

The REVERE project:Experiments with the application of probabilistic NLP to systems engineering

Despite natural language’s well-documented shortcomings as a medium for precise technical description, its use in software-intensive systems engineering remains inescapable. This poses many problems for engineers who must derive problem understanding and synthesise precise solution descriptions from free text. This is true both for the largely unstructured textual descriptions from which system requirements are derived, and for more formal documents, such as standards, which impose requirements on system development processes. This paper describes experiments that we have carried out in the REVERE1 project to investigate the use of probabilistic natural language processing techniques to provide systems engineering support

SMEs and Certified Management Standards: The Effect of Motives and Timing on Implementation and Commitment

Existing research on certifiable management standards (CMS) and corporate social responsibility (CSR) tends to focus on large companies and is characterised by disagreement about the role of these standards as drivers of CSR. We contribute to the literature by shifting the analytical focus to the behaviour of small and medium-sized enterprises (SMEs) that subscribe to multiple CSR related standards. We argue that, in respect of motive and commitment, SMEs are not as different from large companies as the literature suggests, as they are guided by similar institutional and economic motives. Results, based on ISO 9001, ISO 14001 and OHSAS 18001 certified SMEs in Greece, demonstrate that later adopters are more susceptible to coercive and mimetic motives and are less likely to commit fully to the CMS requirements, while earlier adopters react to normative motives and considerations of internal efficiency gains and tend to carry out CMS requirements with greater diligence

Industrial Illegitimacy and Negative Externalities: the Case of the Illinois Livestock Industry

An industry's legitimacy depends on stakeholders' perceptions and assessments of the appropriateness of its behavior across a wide array of settings. While products and services may be highly valued, and in some cases essential, business externalities serve as a powerful counterforce undermining legitimacy. The work draws on the theory of industrial legitimacy and employs a taxonomy of four different legitimacy sub components; pragmatic, regulative, normative, and cognitive. The paper identifies how externalities affect an industry's legitimacy and the relative contribution of each sub component. The research then empirically tests the theory using the case of the Illinois livestock industry.Livestock Production/Industries,

Towards a Semantic-based Approach for Modeling Regulatory Documents in Building Industry

Regulations in the Building Industry are becoming increasingly complex and involve more than one technical area. They cover products, components and project implementation. They also play an important role to ensure the quality of a building, and to minimize its environmental impact. In this paper, we are particularly interested in the modeling of the regulatory constraints derived from the Technical Guides issued by CSTB and used to validate Technical Assessments. We first describe our approach for modeling regulatory constraints in the SBVR language, and formalizing them in the SPARQL language. Second, we describe how we model the processes of compliance checking described in the CSTB Technical Guides. Third, we show how we implement these processes to assist industrials in drafting Technical Documents in order to acquire a Technical Assessment; a compliance report is automatically generated to explain the compliance or noncompliance of this Technical Documents

Policy Making Without Legislating; the Self-regulation of Commercial Property Leasing

The terms of a commercial property lease covers aspects such as rent, alterations to premises and the ability to leave; consequently they have a significant impact on cash flow and the ability of a business to develop. In contrast to the heavily-legislated residential sector, commercial landlords and tenants in the UK are largely free to negotiate the terms of their contract. Yet, since the property crash of 1989/90, successive governments have taken an interest in commercial leasing; in particular there is a desire to see landlords being more flexible. UK Government policy in this area has been pursued through industry self-regulation rather than legislation; since 1995 there have been three industry codes of practice on leasing. These codes are sanctioned by government and monitored by them. Yet, 15 years after the first code was launched, many in the industry see the whole code concept as ineffective and unlikely to ever achieve changes to certain aspects of landlord behaviour. This paper is the first step in considering the lease codes in the wider context of industry self-regulation. The aim of the paper is twofold: First a framework is created using the literature on industry self-regulation from various countries and industries which suggests key criteria to explain the effectiveness (or ineffectiveness) of self-regulation. This is then applied to the UK lease codes based on research carried out by the authors for the UK Government to monitor the success of all three codes. The outcome is a clearer understanding of the possibilities and limitations of using a voluntary solution to achieve policy aims within the property industry.Commercial leases, self-regulation, UK