Sarbanes-Oxley compliance refers to compliance with the Public Company Accounting Reform and Investor Protection Act of 2002, also known as Sarbanes-Oxley. Sponsored by Senator Paul Sarbanes of Maryland and Representative Michael Oxley of Ohio, the Act was a response to an excess of corporate fraud scandals, such as the Enron case. Sarbanes-Oxley compliance requires that financial institutions carefully document and disclose their internal controls, the ethics codes that employees are subject to, and audit committee reports.

Sarbanes-Oxley is a rather complicated act that attempts to prevent corporate fraud. To that end, Sarbanes-Oxley compliance requires attention to many different clauses in the Act. For example, Section 402(a) of Sarbanes-Oxley limits the conditions under which companies can make loans or extend credit to their executives, and Section 404 mandates self-assessment reports to be compiled, addressing the effectiveness of the internal controls the company uses.

Sarbanes-Oxley compliance also requires agents of the law to adhere to the legal changes that the Act has made. For instance, Title VIII of Sarbanes-Oxley, the Corporate and Criminal Fraud Accountability Act of 2002, makes fraud a riskier business and expands the government’s ability to prosecute in cases of fraud. The Act makes it illegal to falsify or destroy documents, requires that auditors keep records for at least five years after an audit, extends the statute of limitations for fraud prosecution, and contains a provision for “whistleblower protection” for employees who comply with the law against their company’s wishes. Similarly, Title IX increases the penalties for fraud and gives the Securities and Exchange Commission more authority when dealing with fraud cases.

Studies on Sarbanes-Oxley compliance have shown that proportionately, large financial institutions spend much less on achieving compliance than small companies. In fact, Sarbanes-Oxley compliance is often so expensive that many small public companies have switched to private companies in order to avoid the expense. Only companies with a market capitalization of 75 million US dollars (USD) or more have to comply with the internal control reports, leaving the smaller companies exempt until July of 2007; however, many feel that this limit is too low and should be raised to give more small companies a break. For more information on Sarbanes-Oxley compliance, view the full text.