The ellipsis speaks volumes. With Sarbox approaching, finance managers will likely be fielding tough questions about data—particularly from audit committees. Says Mike Ressner, a former CFO who sits on the audit committees of WilTel Communications and Entrust: “Audit committees ought to be saying, ‘You’re representing this information as high quality and done with integrity. It would be nice if you could demonstrate that.’”
In all likelihood, internal-control departments will be respon-sible for the demonstrating. “Generally, controllers tend to be more focused on the general ledger or subledgers,” says Ressner. “Now they’ve pushed back out of those ledgers to the underlying systems to make sure the data flow is correct.”
Consider Hudson United, which operates about 200 branches in New Jersey, New York, and Connecticut. To help satisfy the Sarbox Sections 302 and 404 certification requirements, Nagelvoort put together a 12-member compliance team that is responsible for the bank’s business departments. Recently, Hudson United began installing a document-workflow program called SOXA Accelerator, marketed by HandySoft. According to Nagelvoort, the program helps the company create reports detailing what management and the company auditors consider material for each line item in the general ledgers.
Hudson United appears to be ahead of most companies—at least in the purchasing of compliance software. Many technology vendors see Sarbox as a big selling opportunity (the next Y2K problem, say some) and are pitching all-encompassing, large-scale compliance products, or “kitchen-sinkware,” as Schrage calls it. So far, few vendors have made a killing from these products. “Since they don’t touch sales,” notes Sid Banerjee, CEO at Falls Church, Virginia-based consultancy Claraview LLC, “there’s no ROI on these products.”
There may be no “R,” but there certainly is an “I.” The cost of purchasing compliance software can easily top the $1 million mark, say consultants. In addition, Watson of Doculabs points out that for every software dollar spent, corporate customers will have to spend $4 in service. “You’re talking about a boatload of consultants,” he says.
Further, some finance managers say they’re not overly impressed with the current crop of compliance products. When executives at Crown Media Holdings, an entertainment company that operates the Hallmark Channel, first started to assess Sarbox compliance, they contemplated buying software to help manage the company’s unstructured data. Specifically, Crown’s executive team was interested in a program that would manage the company’s voluminous contract rights—one of its key business processes. Although Crown has deployed a document-management program sold by Optika Inc., it has yet to purchase a rights-management application.
Why the delay? “The offerings are not there yet,” answers Mark Thompson, senior vice president, finance and information technology, at Crown. “There’s nobody out there.” Other finance managers tell similar stories. One controller says flatly: “The compliance products are still immature.”
Deborah Birnbach, a partner in the litigation group at Boston law firm Testa, Hurwitz & Thibeault who advises clients on compliance, has heard similar complaints. “Companies will buy compliance software,” she predicts, “when they see other people buying it.”