Customer Reviews

Sarbanes-Oxley Internal Controls: Effective Auditing with AS5, CobiT, and ITIL

5 star:		(1)
4 star:		(0)
3 star:		(0)
2 star:		(0)
1 star:		(0)

 

 

This book is a must read for CFOs, CEOs, consultants, internal and external auditors who want to know best how to navigate in a Sarbanes-Oxley world. The book is very well written and deals with a technical subject in an easy to understand style. The author obviously knows his subject inside and out. The book bring the reader up to date with the latest interpretations and developments with one of the most sweeping laws to affect the business world in a generation.

CEOs can learn not only the pitfalls of non compliance, but probably more importantly how to view, quantify, and manage risk in a more constructive framework. Proper internal controls and risk management can be very good for business and long term profitability.

For CFOs concerned about the bottom line, the book lays out strategies for reducing compliance costs by highlighting recent changes and developments supporting a more risk based and ultimately more cost effective approach.

Consultants will find the author's sweeping knowledge of current practices and trends invaluable as they advise clients on effective coping strategies for enterprises of all sizes. Internal and external auditors will find support for implementing and refining a more risk based approach to auditing, and in particular a proper review of internal controls.

The book goes beyond a simple review of Sarbanes-Oxley to incorporate other important frameworks necessary to a proper implementation. I will spare you the acronyms involved, but suffice it to say that these evolving audit, information technology, and risk management frameworks which the author outlines so well, are critical to a proper understanding of the implications of Sarbanes-Oxley and the possible path of future developments. Those who do not take the opportunity to read this book, do so at their own and their company's peril.