We identify a sample of firms with restatements attributable to underlying control weaknesses, some which had previously reported these weaknesses as required by SOX 404 and some of which acknowledged them only after announcing the related restatement. We then examine whether various penalties that could serve as enforcement mechanisms for SOX 404 differ across these two groups. We find no evid...

We analyze the potential benefits that firms can realize from implementing technology specifically aimed at monitoring the effectiveness of their internal control systems. The Committee of Sponsoring Organizations of the Treadway Commission asserts that effective internal control monitoring should enhance the efficiency of internal control processes, and in turn, the assurance over such process...

Automated control weaknesses are associated with defects in computer hardware or computer applications. AU 319 does not require auditors to add professionals with specialized skills in automated controls (or IT audit specialists) to the audit engagement. Auditors may encounter a material automated control weakness and adjust their audit plan without the assistance of an IT audit specialists. Th...

Processes are not always executed as expected. Deviations assure the necessary flexibility within a company, but also increase possible internal control weaknesses. Since the number of cases following such a deviation can grow very large, it becomes difficult to analyze them case-by-case. This paper proposes a semi-automatic process deviation analysis method which combines process mining with a...

Since the introduction of the Sarbanes-Oxley (SOX) Act in 2002, companies have begun to place more emphasis on information technology (IT) internal controls. IT internal controls are policies that provide assurance that technical systems operate as intended, provide reliable data, and comply with regulations. Research suggests that firms with strong internal controls perform better than those w...

Good performance within a company is the result of correct interaction of business management with its internal and external environment. The recognition of internal strengths and weaknesses, as well as external opportunities and threats, takes place on the basis of a SWOT-analysis. However, despite their importance, many companies often only have vague ideas of their competitive strengths and ...