Ever since the collapse of Enron and the 2002 implementation
of Sarbanes-Oxley, auditors and investors are looking at companies' corporate compliance practices with a fine tooth comb. This has
only been heightened by stock option backdating scandals and executive
compensation reform. And, while there have been articles and seminars on corporate compliance ad nauseam, last week, an article in the
Boston Business Journal's Corporate Compliance section entitled "For small
business, procrastination is a risky option," did an usually good job of highlighting the most important aspects of corporate compliance
for privately-held companies by focusing on four basic steps for implementing a fraud prevention program. Kudos to Nancy G. Brown,
an attorney at the Ohio law firm of Taft, Stettinius & Hollister
LLP, for clearly articulating these steps that private businesses of any
size should take at a minimum to improve their corporate compliance programs. If you want to start with the highest ROI, why not
start with those steps that can help to keep your officers and directors out of jail?
The four fraud prevention steps are:
- Create a Code of Business Conduct and Ethics;
- Implement a Whistleblower Protection Program;
- Adopt a Document Retention Policy; and
- Develop a Corporate Compliance and Ethics Program (based on the Federal Sentencing Guidelines).
This article is consistent with the online webinars Two
Step Software has been offering since 2005 called "Corporate Governance in Three Easy Steps: Using Sarbanes-Lite as a Framework." The BBJ
article focused primarily on what we refer to as the first of three steps, Fraud Prevention. Since it's the one most likely to land the
officers and directors of a privately-held company in jail, it's the right place
to start. The other two steps that we recommend focus on corporate
governance and internal controls.
As Brown points out in the BBJ article, Sarbanes-Oxley applies
to all companies when it comes to knowingly destroying documents with the intent to obstruct or interfere with an investigation or
retaliating against an employee who provides information to the government about
a possible violation of federal law. Also, she recommends using the seven criteria in the Federal Sentencing Guidelines to create
a corporate compliance program that will reduce the likelihood of prosecution and shorten potential sentences. These guidelines
were updated at the end of 2004 to add that a company's officers and directors must create and promote a culture of ethical behavior
and knowledgeable compliance with the law.
This article emphasizes that good corporate governance is not just
a high-priced luxury for privately-held companies. First, it's not as
"high priced" as many companies imagine since all of these requirements can be implemented with limited legal counsel or by
downloading templates from the internet. Second, the payoff is always very
high when you are trying to prevent fraud and avoid criminal prosecution.
As Brown summarizes: "If legal compliance sounds burdensome, keep
in mind that an effective corporate compliance program's real value is in
preventing illegal conduct and creating an ethical culture that will benefit the company over the long term." Best of all, it reduces
the potential liability for your officers and directors, lowers the risks
associated with obtaining financing, and increases the value of an enterprise to a potential acquirer.