# Sarbanes-Oxley is going to process my company out of business

**URL:** https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024
**Category:** The BBQ Pit
**Created:** [October 13, 2004, 3:56pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024 "2004-10-13T15:56:13Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![DeadlyAccurate](https://avatars.discourse-cdn.com/v4/letter/d/ac91a4/32.png) [@DeadlyAccurate](https://boards.straightdope.com/u/DeadlyAccurate)
#### Post date: [October 13, 2004, 3:56pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/1 "2004-10-13T15:56:13Z")

</div>

I work for a major corporation, and we’ve been hit so hard by [Sarbanes-Oxley](http://www.sarbanes-oxley.com/) that we can now barely function. Absolutely nothing can be done without going through five channels of people, each of whom has their own reasons for delaying. I have to tack on a minimum of 2 days for any project I get, just to make sure all of the people involved have their paperwork on time. It’s costing us in efficiency in ways that nothing else has ever done. We have a “zero tolerance” policy regarding compliance, which basically means, “Fuck up once and we don’t give a shit how good a worker you are; you’re outta here.”

Anyone else having this problem?

---

<div class="post-metadata">

### Author: ![RTFirefly](https://avatars.discourse-cdn.com/v4/letter/r/c77e96/32.png) [@RTFirefly](https://boards.straightdope.com/u/RTFirefly)
#### Post date: [October 13, 2004, 4:37pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/2 "2004-10-13T16:37:57Z")

</div>

Your rant might be more believable if it had some specifics, like a particular provision of Sarbanes-Oxley, and what your company feels it must do to satisfy it.

---

<div class="post-metadata">

### Author: ![TroubleAgain](https://avatars.discourse-cdn.com/v4/letter/t/e480ec/32.png) [@TroubleAgain](https://boards.straightdope.com/u/TroubleAgain)
#### Post date: [October 13, 2004, 4:43pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/3 "2004-10-13T16:43:55Z")

</div>

My problem with Sarbanes-Oxley is that I work in IT, and we’ve had to make major frickin’ revisions to our entire mainframe system and some of the changes are frickin’ crippling us! Welcome to Hell Week.

---

<div class="post-metadata">

### Author: ![Lord\_Ashtar](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@Lord\_Ashtar](https://boards.straightdope.com/u/Lord_Ashtar)
#### Post date: [October 13, 2004, 4:45pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/4 "2004-10-13T16:45:34Z")

</div>

I’m so with you, **DeadlyAccurate**. It used to be that if I had to make a database change, I called my boss and told her what I wanted to do. If it made sense, she’d tell me to go ahead and do it.

Now, I have to submit an email detailing the problem, two specific people have to agree there’s a problem. Then I have to describe how I’m going to fix it, my changes have to be approved by two more people. Then I try it in a test environment, get it approved twice more, and actually implement the change.

Fuck Enron, Worldcom, Tyco, and whoever else is responsible for making my job five times as difficult.

---

<div class="post-metadata">

### Author: ![Liberal](https://avatars.discourse-cdn.com/v4/letter/l/848f3c/32.png) [@Liberal](https://boards.straightdope.com/u/Liberal)
#### Post date: [October 13, 2004, 4:57pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/5 "2004-10-13T16:57:04Z")

</div>

Enron? What about Bush and the Congress? They’re the ones who write the laws.

---

<div class="post-metadata">

### Author: ![Lord\_Ashtar](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@Lord\_Ashtar](https://boards.straightdope.com/u/Lord_Ashtar)
#### Post date: [October 13, 2004, 4:58pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/6 "2004-10-13T16:58:22Z")

</div>

I doubt Sarbanes-Oxley would have been passed had it not been for the unscrupulous assholes at the companies I mentioned earlier.

---

<div class="post-metadata">

### Author: ![Metacom](https://avatars.discourse-cdn.com/v4/letter/m/ecae2f/32.png) [@Metacom](https://boards.straightdope.com/u/Metacom)
#### Post date: [October 13, 2004, 5:02pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/7 "2004-10-13T17:02:25Z")

</div>

> [@Lord Ashtar](#):
>
> I doubt Sarbanes-Oxley would have been passed had it not been for the unscrupulous assholes at the companies I mentioned earlier.

[Brain Slug]  
But it’s Big Government that writes and enforces these regulations in a blatant attempt to impose their fascist will upon the corporations that supply us with health care, clean air, apple pie, worm-free puppies, and all other things necessary and sufficient for living a satisfying middle-class life. We must give them tax breaks!  
[/Brain Slug]

---

<div class="post-metadata">

### Author: ![TellMeI\_mNotCrazy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tellmei_mnotcrazy/32/3419_2.png) [@TellMeI\_mNotCrazy](https://boards.straightdope.com/u/TellMeI_mNotCrazy)
#### Post date: [October 13, 2004, 5:02pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/8 "2004-10-13T17:02:48Z")

</div>

Luckily the major corporation I work for has had a really strong compliance program in place already, and most of the SOX initiatives have just fallen neatly into place alongside. For the most part anyway.

Either way, I can’t complain. If it weren’t for SOX, I probably wouldn’t have much work to do.

---

<div class="post-metadata">

### Author: ![Liberal](https://avatars.discourse-cdn.com/v4/letter/l/848f3c/32.png) [@Liberal](https://boards.straightdope.com/u/Liberal)
#### Post date: [October 13, 2004, 5:04pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/9 "2004-10-13T17:04:39Z")

</div>

> [@Lord Ashtar](#):
>
> I doubt Sarbanes-Oxley would have been passed had it not been for the unscrupulous assholes at the companies I mentioned earlier.

I blame that damn butterfly in China. It has brought the world no end of sorrow.

---

<div class="post-metadata">

### Author: ![Meatros](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@Meatros](https://boards.straightdope.com/u/Meatros)
#### Post date: [October 13, 2004, 5:26pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/10 "2004-10-13T17:26:10Z")

</div>

> [@Liberal](#):
>
> I blame that damn butterfly in China. It has brought the world no end of sorrow.

Damned butterfly…  
😉

---

<div class="post-metadata">

### Author: ![Homebrew](https://avatars.discourse-cdn.com/v4/letter/h/c89c15/32.png) [@Homebrew](https://boards.straightdope.com/u/Homebrew)
#### Post date: [October 13, 2004, 5:34pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/11 "2004-10-13T17:34:35Z")

</div>

Try working in an ISO 140001 compliant environment. Jeez. “I’m sorry you can’t sharpen you pencil that way, it’s not in the Procedures manual.” Wanna give a go to writing ISO standards for stripping film?

---

<div class="post-metadata">

### Author: ![Pyrrhonist](https://avatars.discourse-cdn.com/v4/letter/p/919ad9/32.png) [@Pyrrhonist](https://boards.straightdope.com/u/Pyrrhonist)
#### Post date: [October 13, 2004, 5:40pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/12 "2004-10-13T17:40:39Z")

</div>

[CEO]  
Maybe if we outsource all the SOX checks and balances to those nice folk in India and Guam, we can reduce company overhead and corporate bellyaching, and flip the bird to the Chinese butterfly.  
[/CEO]

In all seriousness, SOX will probably bend me over a log and asked me to squeal like a pig in the not so near future. I have procedures and routines that update data in Oracle tables—

---

<div class="post-metadata">

### Author: ![DeadlyAccurate](https://avatars.discourse-cdn.com/v4/letter/d/ac91a4/32.png) [@DeadlyAccurate](https://boards.straightdope.com/u/DeadlyAccurate)
#### Post date: [October 13, 2004, 6:10pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/13 "2004-10-13T18:10:36Z")

</div>

> [@RTFirefly](#):
>
> Your rant might be more believable if it had some specifics, like a particular provision of Sarbanes-Oxley, and what your company feels it must do to satisfy it.

No clue. I can’t understand the mess we’re having to deal with. All I know is that for everything that used to be solved by a quick email or phone call, we now have to send a request to the help desk, get it routed to the correct group, wait until they get around to it, work on the problem as originally assigned when that’s done, make sure all the paperwork is done, send another request to the help desk so I can get the program into production, send a request to another group (because it’s a two-step process), tell them that I need the changes but to not do them until I say so (they require a 3-day lead time), and maybe, finally, get everything in production. But only if all the paperwork was taken care of. The last time I had to put a program into production, I didn’t realize I now had to have the paperwork on the person’s desk first before he would approve the program. Since the program would have crashed at 5:00 am on a Saturday morning, and he would’ve been called just as I would, he was able to bend the rules just that once so long as I’d have the paperwork to him ASAP that Monday. Of course the paperwork had to go to the manager and the business user first.

Everyone around me is frustrated because we can’t do anything efficiently or take any initiative with any of our work. Seriously, everything we do has to be pre-approved, so anything like trying to optimize a program for a faster run would never get approved by the business users, nor would re-writing Assembler programs into newer languages so that when all the guys who know Assembler eventually retire, someone could maintain them.

---

<div class="post-metadata">

### Author: ![Shodan](https://avatars.discourse-cdn.com/v4/letter/s/9f8e36/32.png) [@Shodan](https://boards.straightdope.com/u/Shodan)
#### Post date: [October 13, 2004, 6:19pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/14 "2004-10-13T18:19:03Z")

</div>

AND I have to retroactively justify every breath I have taken for the last year and a half. I spent an hour yesterday going back to document every production change I have made since I joined the team. Upon receiving which, my boss then requested that I do the same for everyone else on the team.

My only hope is to snow them under with so much documentation that they don’t bother me and I can get some REAL work done for year-end.

You will have to excuse me - I have to go fix the bug that nobody told me about because they were too busy documenting quality control processes.

Regards,  
Shodan

---

<div class="post-metadata">

### Author: ![DeadlyAccurate](https://avatars.discourse-cdn.com/v4/letter/d/ac91a4/32.png) [@DeadlyAccurate](https://boards.straightdope.com/u/DeadlyAccurate)
#### Post date: [October 13, 2004, 6:25pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/15 "2004-10-13T18:25:16Z")

</div>

That reminds me of something my co-worker was asked for the other day, **Shodan**. The business users wanted to see the source code of some particular program for some reason. Our manager said, “Sure, just send it on to them. If it’s Assembler, even better.” Sure enough, the program was written in Assembler, which makes it unreadable for anyone but an Assembler programmer. Even most programmers experienced in other languages cannot follow Assembler programs. I joked that he should even strip out the comments before he sends it over.

---

<div class="post-metadata">

### Author: ![cowgirl](https://avatars.discourse-cdn.com/v4/letter/c/8c91f0/32.png) [@cowgirl](https://boards.straightdope.com/u/cowgirl)
#### Post date: [October 13, 2004, 6:37pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/16 "2004-10-13T18:37:01Z")

</div>

Non-American here.

Can someone please enlighten us as to what y’all are talking about? Normally I can piece it together from the context, but all I can tell is that you all seem to have a lot more paperwork to do (which certainly sounds very frustrating), and that you all seem to have the same job. Which I can’t identify.

Thanks !

---

<div class="post-metadata">

### Author: ![Lord\_Ashtar](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@Lord\_Ashtar](https://boards.straightdope.com/u/Lord_Ashtar)
#### Post date: [October 13, 2004, 6:46pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/17 "2004-10-13T18:46:59Z")

</div>

**cowgirl** , read the OP’s link. It’ll tell you everything you want to know (and then some).

---

<div class="post-metadata">

### Author: ![DeadlyAccurate](https://avatars.discourse-cdn.com/v4/letter/d/ac91a4/32.png) [@DeadlyAccurate](https://boards.straightdope.com/u/DeadlyAccurate)
#### Post date: [October 13, 2004, 6:49pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/18 "2004-10-13T18:49:44Z")

</div>

Here’s a very brief definition:

> [@](#):
>
> Most observers would agree that the Sarbanes-Oxley Act (SOA) is the single most important **piece of legislation affecting corporate governance, financial disclosure and the practice of public accounting** since the US securities laws of the early 1930s. It is, moreover, a law that came into being in the glare of a very bright, very hot spotlight. (bolding mine)

---

<div class="post-metadata">

### Author: ![paperbackwriter](https://avatars.discourse-cdn.com/v4/letter/p/53a042/32.png) [@paperbackwriter](https://boards.straightdope.com/u/paperbackwriter)
#### Post date: [October 13, 2004, 6:53pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/19 "2004-10-13T18:53:29Z")

</div>

[The Accountant, Compliance, and Enforcement Staffing Act of 2003](http://thomas.loc.gov/cgi-bin/query/D?c108:5:./temp/~c1087yp8Lm::), a/k/a/ the Sarbanes-Oxley Act (after its two main sponsors) was part of Congress’s response to the Enron/Worldcom/Tyco/Arthur Anderson/etc. scandals. Essentially, it tightened accounting rules. None of the provisions of the act itself require the procedural changes **DeadlyAccurate** and **Shodan** describe, but the law has caused some US corporate accounting and auditing departments to start requiring documentation for _every_thing. In these places, the internal auditors are now so afraid of the government regulators that you can’t sneeze without filing a report detailing the capital costs of the lost moisture.

IOW, it’s not so much the provisions of the law itself, as the corporate interpretation. There’s nothing in the law that directly relates to database maintenance, for instance, but database maintenance may later impact cost accounting line items, or have other impacts the bean counters need to be able to justify.

---

<div class="post-metadata">

### Author: ![Liberal](https://avatars.discourse-cdn.com/v4/letter/l/848f3c/32.png) [@Liberal](https://boards.straightdope.com/u/Liberal)
#### Post date: [October 13, 2004, 6:55pm UTC](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024/20 "2004-10-13T18:55:47Z")

</div>

> [@DeadlyAccurate](#):
>
> No clue. I can’t understand the mess we’re having to deal with. All I know is that for everything that used to be solved by a quick email or phone call, we now have to send a request to the help desk, get it routed to the correct group, wait until they get around to it, work on the problem as originally assigned when that’s done, make sure all the paperwork is done, send another request to the help desk so I can get the program into production, send a request to another group (because it’s a two-step process), tell them that I need the changes but to not do them until I say so (they require a 3-day lead time), and maybe, finally, get everything in production. But only if all the paperwork was taken care of. The last time I had to put a program into production, I didn’t realize I now had to have the paperwork on the person’s desk first before he would approve the program. Since the program would have crashed at 5:00 am on a Saturday morning, and he would’ve been called just as I would, he was able to bend the rules just that once so long as I’d have the paperwork to him ASAP that Monday. Of course the paperwork had to go to the manager and the business user first.
> 
> Everyone around me is frustrated because we can’t do anything efficiently or take any initiative with any of our work. Seriously, everything we do has to be pre-approved, so anything like trying to optimize a program for a faster run would never get approved by the business users, nor would re-writing Assembler programs into newer languages so that when all the guys who know Assembler eventually retire, someone could maintain them.

It sounds almost like an Ayn Rand novel, just when the do-nothings and law-makers are taking over while all the productive people begin disappearing.

[Next page](https://boards.straightdope.com/t/sarbanes-oxley-is-going-to-process-my-company-out-of-business/269024.md?page=2)
