The appropriately named Sarbanes-Oxley Compliance Toolkit includes a whole range of materials specifically put together to both introduce, and take you through this most important of legislation.
As security is such a major theme on the Act, many organizations are using the international ISO standards. The ISO 27001 Portal outlines these. A copy of the standards, and security policies, can be obtained via the ISO 17799 Toolkit.
The SOX email storage requirements can be fulfilled using the
GFI MailArchiver
SOX Advertisers
Sarbanes What?
Our server logs indicate some interesting mis-spellings: Sarbannes Oxley, Sorbane Oxley, Sarbanne Oxley, Sarbaines Oxley, Sarbanesoxley, Sorbanes Oxley, Sabanes Oxley, Sarbane Oxley, and Sarbanes Oaxley, to name but a few!
Sarbanes-Oxley Act Forum: Forums
The Sarbanes Oxley Act :: View topic - Is this an ethical action?
Joined: Oct 30, 2006 Posts: 39 Location: Philadelphia, PA
Posted: Thu Nov 30, 2006 9:26 am Post subject: Is this an ethical action?
Currently, my company uses E&Y for our external audit for SOX 404 and other financial complacency auditing.
During the course of the audit, which is still being conducted and has been for quite a few months, I've become some what friendly with both auditors, but more so one over the other.
I was wondering what others thought about a question I have. AFTER the audit is complete next month, I'd like to get in contact with a recruiter from EY. Considering how friendly I've become with one of our auditors (we also went to the same school for undergrad) ... would it be ethical for me to e-mail him and ask about getting in touch with a recruiter?
Thanks for any thoughts!
-Erich
P.S. I've decided to delay getting my CISA certification. I don't have enough experience to get the certification after I pass the test, so I figured I'll get the certification at a date closer to when I'm ready to get an auditing job. In the meantime, I'm going to get an accounting/finance post-baccalaureate certificate from Penn (4 classes at grad level).
Joined: Jan 12, 2006 Posts: 849 Location: Roanoke, Virginia
Posted: Thu Nov 30, 2006 11:10 am Post subject:
Hi Erich - It might work better to directly apply with EY through their Human Resources or online facilities for jobs if there is interest in the future. You can certainly use your friend as a reference, but I'd avoid working directly with him.
Many times if you apply on-line, there might be provisions to indicate company employee referrals. Unless going through a job recruiter is required, I'd avoid that as it adds expense to the job hiring process verses a direct hire.
You can still informally and privately network with your friend for possible openings, etc. These suggestions are mainly to ensure the audit service firm / company relationship isn't impacted.
Joined: Oct 30, 2006 Posts: 39 Location: Philadelphia, PA
Posted: Thu Nov 30, 2006 12:54 pm Post subject:
harrywaldron wrote:
Hi Erich - It might work better to directly apply with EY through their Human Resources or online facilities for jobs if there is interest in the future. You can certainly use your friend as a reference, but I'd avoid working directly with him.
Many times if you apply on-line, there might be provisions to indicate company employee referrals. Unless going through a job recruiter is required, I'd avoid that as it adds expense to the job hiring process verses a direct hire.
You can still informally and privately network with your friend for possible openings, etc. These suggestions are mainly to ensure the audit service firm / company relationship isn't impacted.
Hey Harry, thanks for the advice. It didn't make me feel right doing it, so I felt it was unethical, I'm happy to see you agree!
Joined: Nov 25, 2004 Posts: 787 Location: London, UK
Posted: Fri Dec 01, 2006 8:54 am Post subject:
I take a contrary view and would not say this is unethical at all. In fact I would not be surprised if E&Y run a referral programme for employees who refer potential candidates to the firm - and thus avoid the exorbitant recruiter fees.
Also lmao at the mental image of financial complacency auditing _________________ "The art of life is to deal with problems as they arise, rather than destroy one's spirit by worrying about them too far in advance" - Cicero
Joined: Jan 12, 2006 Posts: 849 Location: Roanoke, Virginia
Posted: Fri Dec 01, 2006 9:16 am Post subject:
Denis - You have an eagle eye -- I'm laughing also as I missed the sentence on financial complacency auditing. Yes, I believe Erich has coined a new term I guess those of us in IT can't spell as well as we should
I also didn't see a violation of ethical standards by "networking" with someone in the company (as it's a fairly accepted practices in our "at will" employment environment). Still, I shared my ideas as perhaps a better approach for seeking employment, so that there might not be any impacts in corporate relationships.
Joined: Oct 30, 2006 Posts: 39 Location: Philadelphia, PA
Posted: Mon Dec 04, 2006 7:38 am Post subject:
harrywaldron wrote:
Denis - You have an eagle eye -- I'm laughing also as I missed the sentence on financial complacency auditing. Yes, I believe Erich has coined a new term I guess those of us in IT can't spell as well as we should
I also didn't see a violation of ethical standards by "networking" with someone in the company (as it's a fairly accepted practices in our "at will" employment environment). Still, I shared my ideas as perhaps a better approach for seeking employment, so that there might not be any impacts in corporate relationships.
Hey, I'm an IT guy, financial professionals look to me for new answers, new words, and new meanings to words that already exist! Isn't that what an engineers job entails?
I'll have to give this more thought before making a move. It's probably a year or two down the road, so I have plenty of time to think
Joined: Oct 30, 2006 Posts: 39 Location: Philadelphia, PA
Posted: Wed Mar 07, 2007 12:27 pm Post subject:
Long story short ... I'm in between a rock and a hard place now.
I spoke to the recruiter and manager at EY in a informal setting (now that 2006s audit is complete) over the phone.
Turns out, they feel it could be problematic if they hire from a company that's also their client. For example, EY doesn't want the client (my company) to be impacted by hiring me because it would appear un-professional and unethical.
This stinks because it appears this particular branch of EY likes me a lot and thinks I'm a great fit. I spoke with the manager last night for close to two hours and I spoke to the recruiter about the current predicament.
In conclusion .... the recruiter and manager are going to talk to the partner and see what they think. Unfortunately, EY isn't hiring for the group I'm interested in at present, so I won't know the end result for a few months.
Just thought some might find the situation interesting.
Joined: Jan 12, 2006 Posts: 849 Location: Roanoke, Virginia
Posted: Wed Mar 07, 2007 4:39 pm Post subject:
Hi - I'd definitely recommend patience, continuing to learn as a professional and doing the best job you can at your company. You obviously have good skill sets to have these folks interested and there's always a chance later. It's good particularly in your 1st couple of jobs to have a few years of service and a good track record (verses bouncing from job to job - unless you truly move ahead with each step).
Good luck in the steps ahead and keep investing in your career by taking classes and using learning opportunities where possible
Posted: Sat Mar 10, 2007 11:50 am Post subject: It's an ethical violation on the part of E&Y
Hello
I agree with Dennis. Although, you have followed more than apt due diligence in this matter, there is no ethics violation on your part. Ethically, E & Y should not approach you for getting hired if known to the Senior Management . Who knows your friend at E & Y may have a silent approval from his partner to approach you for you being a valuable resource to Ernst & Young.
Well all the best in this matter and for your CISA (I believe that you can still take the exam as auditing is not the only criteria for certification(as long as you are involved in the control framework). Moreover, CISA governing bodies keep on changing the syllabus for the exam in line with future expectation for the IT industry. I would advise you to keep track of the syllabus and should be prepared to take the exam when the current syllabus is in line with your core competency and preparation. So do not delay in taking the exam.
Joined: Oct 30, 2006 Posts: 39 Location: Philadelphia, PA
Posted: Mon Mar 12, 2007 1:07 pm Post subject: Re: It's an ethical violation on the part of E&Y
Chhaava wrote:
Hello
I agree with Dennis. Although, you have followed more than apt due diligence in this matter, there is no ethics violation on your part. Ethically, E & Y should not approach you for getting hired if known to the Senior Management . Who knows your friend at E & Y may have a silent approval from his partner to approach you for you being a valuable resource to Ernst & Young.
Well all the best in this matter and for your CISA (I believe that you can still take the exam as auditing is not the only criteria for certification(as long as you are involved in the control framework). Moreover, CISA governing bodies keep on changing the syllabus for the exam in line with future expectation for the IT industry. I would advise you to keep track of the syllabus and should be prepared to take the exam when the current syllabus is in line with your core competency and preparation. So do not delay in taking the exam.
All the best once again.
Hi Chhaava, thanks for the post!
I wanted to make it clear that I approached E&Y and I'm waiting to hear back what their thoughts regarding the manner are ... although I don't think I'll know until EY TSRS begins hiring (they've stopped for the last 6 months)
Posted: Fri Mar 23, 2007 8:30 am Post subject: It is okay
It is okay. We are better off pursuing opportunities with direct clients rather than with Big 4, as their business from SOX outsourcing is coming to an end as more and mre clients are bringing sustenance inhouse.
I have been given to understand that market for us is going to open soon for this inhouse sustenance.
Joined: Oct 30, 2006 Posts: 39 Location: Philadelphia, PA
Posted: Tue Apr 24, 2007 8:21 am Post subject:
Well, after looking around and interviewing for non-big4 firms, I was just made an offer an accepted. While some of my work will be SOX related, it's only ~30%.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
Trademarks referenced on the SOX Act Forum are property of their respective owners. Comments are property of their respective posters. Sarbanes-Oxley Act Implementation Portal: Sarbanes Oxley compliance, information, software, & internal audit committee resources. Sarbox. Site source is copyright nuke (c)2003, and is Free Software under the GNU / GPL licence agreement. All Rights Are Reserved.