Ensuring ethical effectiveness: new rules mean virtually every company will need a code of ethics.EXECUTIVE SUMMARY
* THE SARBANES-OXLEY ACT See SOX. NOW REQUIRES PUBLICLY traded companies publicly traded company
A company whose shares of common stock are held by the public and are available for purchase by investors. The shares of publicly traded firms are bought and sold on the organized exchanges or in the over-the-counter market. to disclose whether they have adopted a code of ethics Code of Ethics can refer to:
World's largest marketplace for securities. The exchange began as an informal meeting of 24 men in 1792 on what is now Wall Street in New York City. is considering new rules that would require listed companies to have a code of business conduct that applies to all employees.
* UNDER THE ACT THE SEC REQUIRES COMPANIES to file an internal control report with their annual report outlining management's responsibilities for establishing and maintaining adequate internal controls as well as its conclusions about the effectiveness of those controls. The company's auditor must attest to management's evaluation.
* MANY COMPANIES ALREADY HAVE ETHICS CODES. With the emphasis in Sarbanes-Oxley on financial reporting, CPAs may want to help employers and clients review these codes to make sure they comply with the new regulations. Companies will need to establish a process for rank-and-file employees to report code violations confidentially to someone outside the ordinary corporate chain of command.
* THE BEST WAY TO DRAFT A CODE OF ETHICS all employees will follow is to bring together a multidisciplinary team from all parts of the organization. Employees must then be trained in what the code means using real-life dilemmas they might encounter on the job. Regular refresher courses are important because ethics training is perishable--people forget.
* COMPANIES WITH AN EXISTING ETHICS CODE UNLIKELY will need a new one. Still, businesses may want to revisit the code to make sure they have a full-blown compliance program in place. Even though the act focuses on the CFO See Chief Financial Officer. , the SEC expects the entire organization to comply with the law.
Stung by the high-profile accounting scandals Accounting scandals, or corporate accounting scandals are political and business scandals which arise with the disclosure of misdeeds by trusted executives of large public corporations. that drove some the nation's leading companies into bankruptcy court bankruptcy court n. the specialized Federal court in which bankruptcy matters under the Federal Bankruptcy Act are conducted. There are several bankruptcy courts in each state, and each one's territory covers several counties. , Congress and other regulatory authorities have taken up their pens in an attempt to legislate business behavior. The Sarbanes-Oxley Act, which President Bush signed into law in July of 2002, requires publicly traded companies to disclose whether they have adopted a code of ethics for their senior financial officers, and if not, why. They also must report promptly any amendments to or waivers from the code.
The New York Stock Exchange, meanwhile, proposed new corporate governance Corporate Governance
The relationship between all the stakeholders in a company. This includes the shareholders, directors, and management of a company, as defined by the corporate charter, bylaws, formal policy, and rule of law. standards which--if the SEC approves them--would require companies traded on that exchange to adopt corporate governance guidelines and a code of business conduct and ethics for all employees. CPAs can help employers or clients navigate these new rules and create a code of ethics that complies with all of the requirements.
NUTS AND BOLTS nuts and bolts
The basic working components or practical aspects: "[proposing]
For companies that choose to adopt a set of ethics guidelines in response to Sarbanes-Oxley--and few will run the risk of not doing so given the negative message it would send to investors, regulators and potential litigants--section 406 of the act says the code should seek to ensure that senior financial executives
* Conduct themselves honestly and ethically, particularly in handling actual or apparent conflicts of interest.
* Provide full, fair, accurate, timely and understandable disclosure in the periodic reports their employers file with the SEC.
* Comply with all applicable government laws, rules and regulations.
Even for CPAs who don't toil as principal financial officers, comptrollers or principal accounting officers--job titles Sarbanes-Oxley specifically targets--the new law introduces a raft of issues. As interpreted by the SEC in the proposed rule-making notice it issued on October 16, 2002, Sarbanes-Oxley does more than suggest companies have a code of ethics for senior financial executives.
Once SEC rules are finalized, section 404 of the act will require publicly traded companies to file in their annual reports an "internal control report" that outlines what steps management has taken to establish and maintain adequate internal controls and financial reporting procedures, as well as management's conclusions about the effectiveness of those controls and procedures--a report CPAs and corporate finance departments likely will have a hand in drafting. The report must say the company's public accountant has attested to, and reported on, management's evaluation of the company's internal controls and financial reporting procedures. The company must include a copy of the auditor's attestation in its annual report.
What's not clear, says CPA (Computer Press Association, Landing, NJ) An earlier membership organization founded in 1983 that promoted excellence in computer journalism. Its annual awards honored outstanding examples in print, broadcast and electronic media. The CPA disbanded in 2000. Sherrie McAvoy, national director of corporate compliance and ethics services for Deloitte & Touche in Dallas, is whether an external auditor The examples and perspective in this article or section may not represent a worldwide view of the subject.
Please [ improve this article] or discuss the issue on the talk page. would be required to formally audit a client's compliance with its own code of ethics. While her initial suspicion is it would not, she says it won't be clear until the SEC issues final regulations. An SEC spokesman notes that Sarbanes-Oxley gave the agency 180 days from the date of the law's enactment, or roughly until the end of January 2003, to issue final rules.
CPA Richard Steinberg Richard Steinberg can refer to
Florham Park was incorporated as a borough by an Act of the New Jersey Legislature on March 9, 1899, from portions of Chatham , takes a similar view. "As they look at internal controls, the external auditors are going to focus on this (the code of ethics)," he says. "Not that they're going to audit it, but they'll consider it as they assess the company's control environment."
Those counting on ethics codes to change corporate behavior may be surprised to learn that most public companies--at least those in the Fortune 1000--already have them. When the U.S. Federal Sentencing Guidelines The Federal Sentencing Guidelines are rules that set out a uniform sentencing policy for convicted defendants in the United States federal court system. The Guidelines are the product of the United States Sentencing Commission and are part of an overall federal sentencing reform became law in 1991, they listed seven elements of an effective corporate compliance program judges could take into consideration when sentencing corporations for federal offenses. Most large public companies quickly realized the value of incorporating these elements into their operations, if only as risk-management tools. Among them was establishing compliance standards and procedures--otherwise known as a code of conduct or ethics.
Today, says McAvoy, surveys her firm conducted show approximately 95% of Fortune 1000 companies have a code of conduct. Stuart C. Gilman, president of the nonprofit Ethics Resource Center in Washington, D.C., says many private companies have such guidelines as well; he estimates that altogether there are more than 3,000 ethics officers working in the United States United States, officially United States of America, republic (2005 est. pop. 295,734,000), 3,539,227 sq mi (9,166,598 sq km), North America. The United States is the world's third largest country in population and the fourth largest country in area. .
What's different now that Sarbanes-Oxley is on the books? According to according to
1. As stated or indicated by; on the authority of: according to historians.
2. In keeping with: according to instructions.
3. McAvoy, the new law puts more emphasis on financial reporting, particularly its accuracy. This could translate into more responsibility for CPAs. Section 301 also mandates that companies put in place a mechanism for employees to raise concerns about financial reporting matters--confidentially and anonymously. The SEC's proposed rules for implementing section 406 go on to say the code of ethics should identify the person or persons to whom employees should deliver those anonymous reports.
Establishing a process for rank-and-file employees to confidentially report code violations is a critical component of any ethics program, according to McAvoy. Most of the companies that already have established such procedures assign a case number to each complaint or tip an employee makes so he or she can track its progress. In addition, the person to whom employees report alleged violations is generally someone outside the ordinary chain of corporate command--an ethics or compliance officer, for example, or an ombudsman--who nonetheless has access to the company's top executives and its board of directors.
The WorldCom case amply illustrated the perils of having employees report complaints to a senior executive with routine corporate responsibilities. Internal auditors who uncovered the company's accounting fraud reported it to the company's then CFO Scott Sullivan Scott Sullivan can refer to:
Many CPAs will have a role in helping companies comply with Sarbanes-Oxley. Certainly, those in corporate finance departments can be expected to be involved in drafting or reviewing those portions of their company's code dealing with financial matters, says Nancy Wilgenbusch, president of Marylhurst University Marylhurst University is a private Catholic university located in Marylhurst, Oregon 20 minutes south of Portland on the Willamette River. The University's adjunct instructors are comprised of working professionals recognized in their fields – leaders, managers, marketers, in Portland, Oregon, and a member of the AICPA AICPA
See American Institute of Certified Public Accountants (AICPA). ethics committee ethics committee A multidisciplinary hospital body composed of a broad spectrum of personnel–eg, physicians, nurses, social workers, priests, and others, which addresses the moral and ethical issues within the hospital. See DNR, Institutional review board. . The portions of the code CPAs might handle would range from insider trading to appropriate and accurate expense reporting, acting as good stewards of company assets, avoiding conflicts of interest and assuring accurate corporate communications Corporate communications is the process of facilitating information and knowledge exchanges with internal and key external groups and individuals that have a direct relationship with an enterprise. with the public. To the extent the code of ethics includes quantifiable measures of accountability concerning items such as insider trading or entertainment expense reporting, for example, Wilgenbusch says CPAs are ideally suited, by virtue of their training and professional expertise, to evaluate or test the results.
External auditors would also appear to have a role in assessing compliance with codes of ethics, if only in the context of a code's being part of a company's internal control process. Gilman encourages outside auditors to go a step further: For each client, the auditor should sign a statement noting that it understands and accepts the client's code of ethics. "This allows the outside auditing firm to comport See COM port. with the company's internal environment," Gilman says. "It permits a level of independence and says, `We're willing to obey and abide by the same set of standards the organization holds itself to.'"
DOING IT RIGHT
A number of companies--including Raytheon and Texas Instruments--have been widely recognized for the scope and quality of their ethics programs. Raytheon makes ethics training a requirement for every employee, all the way up to the CEO (1) (Chief Executive Officer) The highest individual in command of an organization. Typically the president of the company, the CEO reports to the Chairman of the Board. . Texas Instruments' employee ethics handbook dates to 1961 and the company has received three ethics awards for its leadership in the field. Texas Instruments See TI.
(company) Texas Instruments - (TI) A US electronics company.
A TI engineer, Jack Kilby invented the integrated circuit in 1958. Three TI employees left the company in 1982 to start Compaq. also provides employees with a business-card-sized pamphlet that serves as a "quick test" for workers faced with an ethical dilemma An ethical dilemma is a situation that will often involve an apparent conflict between moral imperatives, in which to obey one would result in transgressing another.
This is also called an ethical paradox .
* Is the action legal?
* Does it comply with our values?
* If you do it, will you feel bad?
* How will it look in the newspaper?
* If you know its wrong, don't do it.
* If you're not sure, ask.
* Keep asking until you get an answer.
While it's difficult to calculate a hard return on investment for drafting and implementing a code, Bruce Pfau, national practice leader for organization measurements at Watson Wyatt Worldwide has tried. A survey his consulting company Noun 1. consulting company - a firm of experts providing professional advice to an organization for a fee
business firm, firm, house - the members of a business organization that owns or operates one or more establishments; "he worked for a conducted in 2000 found workers who believed their company operated with honesty and integrity showed higher levels of commitment to their employer in terms of job satisfaction and company pride than those who judged their employer to have low ethical values. Pfau also found companies highly rated by their employees for honesty and integrity produced, over the previous three years, a higher return to shareholders (112%) than poorly rated companies (76%).
PUTTING TOGETHER A CODE
With virtually all companies needing a code of ethics so they can avoid having to report they don't have one under Sarbanes-Oxley, the task of developing one from scratch need not be too involved. The Financial Executives Institute has drafted a one-page model code of ethics for senior financial executives it says conforms to the new law; it can be found on the organization's Web site at www.fei.org. Another code developed by Parson Consulting, a national consulting company specializing in finance, accounting and business systems is available at www.parsongroup.com/sarbanes-market_position.asp.
But most experts say it would be far better to create a code of ethics for the entire company, one that applies to all employees and builds on their input. Under the proposed changes to the NYSE NYSE
See: New York Stock Exchange listing requirements Listing requirements
Requirements, including minimum shares outstanding, market value, and income, that are laid down by an exchange for any stock to be listed for trading. , such a policy would be required of all companies trading on the Big Board.
The challenge companies face--whether creating an entirely new code or reassessing and upgrading an existing one to reflect Sarbanes-Oxley--is to draft a document that isn't just decoration on the company bulletin board but instead helps employees live up to the ethical standards investors, legislators and regulators demand. "We're terrified ter·ri·fy
tr.v. ter·ri·fied, ter·ri·fy·ing, ter·ri·fies
1. To fill with terror; make deeply afraid. See Synonyms at frighten.
2. To menace or threaten; intimidate. here of what we call the three Ps--the print, post and pray syndrome," says Gilman. "You print a code of conduct, post it on the wall and pray people actually read it."
According to Gilman and other ethics professionals, the correct approach is to bring together a multidisciplinary team from all parts of the organization--finance, sales, human resources The fancy word for "people." The human resources department within an organization, years ago known as the "personnel department," manages the administrative aspects of the employees. , operations, marketing, executive--to draft a code, communicate its importance to employees and then involve them in seminars to help understand how the code applies to them and their colleagues. Finally, says Minneapolis-based ethics trainer Nan DeMars, author of You Want Me To Do What? (Fireside, 1998), senior management must follow through and hold people accountable for complying with the code.
One way to make a code of ethics come alive for employees, DeMars says, is for human resources to plan training sessions that engage them in discussions about real-life or theoretical ethical dilemmas they might expect to handle on the job. The more specific the situations are to the particular company, the more valuable they will be. DeMars gives these examples of the types of questions she might pose in a seminar: "You are the assistant to David Duncan David Duncan (born 1960), is the United States government's star witness in the Arthur Andersen trial. He has said fears over interpretation prompted him to order the shredding of documents relating to Enron. , lead auditor for Arthur Andersen For the U.S. Supreme Court case commonly known as Arthur Andersen, see .
Arthur Andersen LLP, based in Chicago, was once one of the "Big Five" accounting firms (the other four are PricewaterhouseCoopers, Deloitte Touche Tohmatsu, Ernst & Young and KPMG), performing . You know the firm is about to be subpoenaed. He asks you to shred documents. What would you do? Or, you are Sharon Watkin's assistant at Enron and you type her memo to Ken Lay warning him of the possibility Enron will implode To link component pieces to a major assembly. It may also refer to compressing data using a particular technique. Contrast with explode. if its current accounting practices continue. Now that you know the company is in trouble and your boss is aware of this, what do you do?"
"You've got to take the words as well as the legal requirements and translate them into understandable practices," agrees John J. Castellani, president of The Business Roundtable Business Roundtable (BRT), an association consisting of the chief executive officers of major U.S. corporations that was founded in 1972 through the merger of the three preexisting business organizations. , an association of CEOs of leading corporations. "Ultimately, doing so gives you a very strong tool. When employees violate the policy, they are dismissed."
DeMars and others agree ethics programs don't achieve much when they are handed down by senior management with little input from other employees or when senior managers themselves fail to abide by To stand to; to adhere; to maintain.
See also: Abide the code or neglect to stress its importance. Enron had a rigorous code of ethics, for example, yet it fell victim to unethical behavior in part because its board of directors twice voted to suspend the code to allow the company's former CFO, Andrew Fastow Andrew Stuart Fastow (born 22 December 1961) was the chief financial officer of Enron Corporation until the U.S. Securities and Exchange Commission opened an investigation into his conduct in 2001. , to launch business activities that created, for him, a conflict of interest. Ethics professionals warn against viewing educational programs as a once-and-done procedure. "Ethics training is perishable," Gilman says. "People forget." To deal with this problem, companies should schedule regular refresher courses for all employees.
While companies must enlist the cooperation of their own staff members to draft a code of ethics that will resonate with them, there's plenty of outside help available, too. Among the Big Four accounting firms, both Deloitte & Touche and PricewaterhouseCoopers offer ethics consulting services, says Gilman. So do some law firms This list of the world's largest law firms by revenue is taken from The Lawyer and The American Lawyer and is ordered by 2006 revenue:
Belmont was founded on March 18, 1859 by former citizens of, and land from, the bordering towns of Watertown (to the south), Waltham (to the ; the Institute for Global Ethics in Camden, Maine Camden is a town in Knox County, Maine, United States. The population was 5,254 at the 2000 census. Geography
According to the United States Census Bureau, the town has a total area of 66.8 km² (25.8 mi²). 47.4 km² (18.3 mi²) of it is land and 19.5 km² (7. ; and the Markkula Center for Applied Ethics The Markkula Center for Applied Ethics at Santa Clara University provides a nationally recognized academic forum for research and dialogue concerning all areas of applied ethics. at Santa Clara Santa Clara, city, Cuba
Santa Clara (sän`tä klä`rä), city (1994 est. pop. 217,000), capital of Villa Clara prov., central Cuba. University in California. (See the sidebar above for information on how to contact these and other resources.)
Elsewhere, the nonprofit Practicing Law Institute in New York City New York City: see New York, city.
New York City
City (pop., 2000: 8,008,278), southeastern New York, at the mouth of the Hudson River. The largest city in the U.S. offers programs on ethics and corporate compliance several times a year, says McAvoy, and has published a series of books on the topic. All that said, Gilman cautions companies against off-loading too much responsibility to outside consultants. "Ethics are one of those things where you don't want someone doing an assessment and charging you a lot of money to tell you what you want to hear," he explains. The best ethics code is one drafted in-house.
Many companies that already have a code of ethics are unlikely to need a new one to respond to Sarbanes-Oxley, says attorney Tom Patton, a partner with Tighe Patton Armstrong Teasdale PLLC PLLC Professional Limited Liability Company
PLLC Polk Life and Learning Center (Bartow, FL)
PLLC Partners of Limited Liability Corporation in Washington, D.C. This is especially true since the new law doesn't require a company to publish its set of guidelines but merely to confirm it has one. "The statute defines a code of ethics in very broad terms, so you have to make sure your existing code meets all of them; assuming it does, you probably don't need to develop a new one," he says.
Stephen Hill Jr., a partner with the Kansas City, Missouri Kansas City is the largest city in the state of Missouri. It encompasses parts of Jackson, Clay, Cass, and Platte counties and is the anchor city of the Kansas City Metropolitan Area, the second largest in Missouri, which includes counties in both Missouri and Kansas. , law firm Blackwell Sanders Peper Martin LLP LLP - Lower Layer Protocol , concurs but adds companies may still want to review their code point by point to make sure it covers all of the provisions in the new law and that they have a "full-blown compliance program in place." The proposed SEC regulations under Sarbanes-Oxley make it clear the code should promote "compliance with applicable government laws, rules and regulations."
At many companies, such reviews are already under way. "A number of companies are taking a hard look at their codes and making sure they're current and sharing them with their boards of directors," says Deloitte & Touche's McAvoy. "They're also taking a look at the financial reporting aspects and making sure they are as robust as they can be." Meanwhile, the Ethics Officers Association reports that about 100 companies have hired ethics officers through October of 2002 alone.
Hill says his firm is telling clients their entire organization, not just the CFO, must be prepared to deal with compliance issues. "Sarbanes-Oxley covers the CFO, but in its October 16 statement, the SEC makes it clear it's going to expect the entire organization to comply with the law," Hill says. By way of example, the proposed SEC regulations mandate that a company's code of ethics apply not only to senior financial executives but also to the "principal executive officer," even though that position was not specified in the act.
According to the London-based Institute of Business Ethics (IBE IBE International Bureau of Education
IBE Internet Booking Engine
IBE Institut für Medizinische Informationsverarbeitung, Biometrie Und Epidemiologie (LMU, Muenchen, Germany)
IBE Ion Beam Etching ) (www.ibe.org.uk) a code of ethics should include a preface, signed by the chairman or CEO, explaining what values are important to top management in conducting the business. It should then cover these key areas:
* The purpose of the business and its values.
* Employee relations including working conditions, recruiting, training, discrimination policies and use of company assets by employees.
* Customer relations guidelines.
* The importance of protecting the investment made by shareholders or other investors.
* Relationships with suppliers.
* How the company relates to society as well as to the wider business community.
* How the company will implement the code, including training.
The IBE also advises any company drafting a code to find a champion--hopefully the CEO--who is prepared to drive the introduction of a business ethics policy. Without this support, there is little chance the company will find the code a useful tool. The board of directors should also endorse the ethics policy.
WILL IT WORK?
Whether any of this will prevent unethical behavior is uncertain, although most experts say codes can make a difference when companies develop and implement them properly. "There's nothing we can do to prevent a crook from stealing if he or she wants to," says ethics committee member Wilgenbusch. "If people are greedy, a code won't prevent them from behaving unethically. But if the CEO gets the company's top 20 people in a room and says, `We're going to adhere to both the spirit and letter of the law; we're going to play by the rules in every sense of the word and anybody who steps across that line of ethical behavior not only will be discharged immediately but prosecuted to the full extent of the law,' then you are going to avoid unethical behavior." That's a goal every accountant can endorse.
In Search of a Policy In an informal poll of 291 executives, 44% of respondents said their company did not have a formal code of ethics in place. The survey was conducted in August and September of 2002. Yes 56% No 44% Source: Christian & Timbers, New York City, www.ctnet.com Note: Table made from pie chart. Resources The following organizations can help accountants who are charged with developing, implementing or monitoring a corporation's code of ethics. Ethics Officers Association 30 Church Street Suite 331 Belmont, Massachusetts 02478 617-484-9400 www.eoa.org Ethics Resource Center 1747 Pennsylvania Avenue, NW Suite 400 Washington, D.C. 20006 202-737-2258 www.ethics.org Institute for Global Ethics P.O. Box 563 Camden, Maine 04843 207-236-6658 www.globalethics.com Markkula Center for Applied Ethics Santa Clara University 500 El Camino Real Santa Clara, California 95053-0633 408-554-5319 www.scu.edu/ethics Practicing Law Institute 810 Seventh Avenue New York, New York 10019-5818 800-260-4PLI or 212-824-5710 www.pli.edu
RANDY MYERS is a freelance financial writer who lives in Dover, Pennsylvania. His e-mail address is firstname.lastname@example.org.