The IIA Advocates for SOX Modernization to Enhance Investor Protection and Efficiency

The IIA's Call for SOX Modernization

The Institute of Internal Auditors (IIA) has released a significant public policy position paper advocating for the modernization of the Sarbanes-Oxley Act (SOX). This initiative comes as Congress considers evaluating SOX's effectiveness and cost. The IIA's recommendations are designed to help regulators enhance investor protection and improve operational efficiency, recognizing that while SOX has been a cornerstone of corporate governance for over two decades, it must adapt to the evolving risk landscape.

Integrating Internal Audit into the SOX Framework

A core tenet of the IIA's proposal is the formal integration of the internal audit profession into the SOX framework. Currently, SOX does not explicitly define or recognize internal auditing, leading to inefficiencies, duplicated efforts, and unnecessary costs. By formally acknowledging internal audit's critical role in supporting SOX compliance and strengthening internal controls, the IIA believes significant improvements can be made.

Key Recommendations for Policymakers

The IIA outlines five key recommendations for policymakers:

• Enhance Legal and Regulatory Clarity: Codify definitions of "internal auditing" and the "internal audit function," recognizing the profession's standards and roles in providing assurance and supporting SOX compliance.
• Re-examine Compliance Understandings: Re-evaluate contemporary interpretations of SOX Sections 302 and 404, focusing on internal audit's role in meeting these requirements.
• Strengthen Internal-External Auditor Partnership: Foster better collaboration between internal and external auditors to improve coordination across the broader assurance ecosystem.
• Explore Cost Reductions: Identify opportunities to reduce SOX compliance costs through emerging technologies and more effective collaboration with internal audit functions.
• Encourage Regulator Engagement: Promote deeper engagement between regulators and the internal audit profession, ensuring internal auditors contribute to policy discussions and stakeholders understand their value in protecting investors and capital markets.

The IIA stands ready to serve as a technical resource for Congress and federal regulators as they consider these crucial updates to strengthen U.S. capital markets.