Sarbanes-Oxley Compliance, Internal Control, and ERP Systems: The Case of mySAP ERP

Abstract

The effort to comply with the Sarbanes-Oxley Act (SOX) has focused management attention in companies all over the world on the importance of assessing, developing, and maintaining an effective and efficient internal control system. Enterprise resource planning (ERP) systems are a crucial factor in developing such a system. Despite the attention this has attracted in practice, little academic research has focused on this area. This chapter addresses the question: How are ERP systems implicated in Sarbanes-Oxley compliance? It aims to show how SOX requirements regarding assessment and improvement of internal controls are related to the functionalities of an ERP system both in local and global implementations. It examines a solution (mySAP ERP) offered by one specific vendor (SAP) and what functionalities are relevant to global SOX compliance. Based on this, the chapter discusses likely developments regarding compliance functionalities in future releases of ERP systems.