Is SOX the mortal enemy of innovation?
The Sarbanes-Oxley Act, commonly referred to as 'SOX', was enacted in 2002 as a response to Enron and the Enron-like financial scandals of the time. I'm in the enviable position of (1) being an ex-accountant and auditor, and (2) selling software that among other things is used to track compliance with SOX, which gives me some perspective on the impact SOX has had on companies.Without getting into the boring details, SOX can (and has) be generalized as forcing companies to document their risks (i.e. "what can go wrong") and ensure that they have controls in place to prevent, or worst case detect, when something does go wrong. While it was a response to accounting abuse, SOX is sometimes interpreted by companies or their auditors more broadly to include virtually anything that could go wrong with the business. It can reach into the HR department, legal, IT, operations - everywhere.
What is the result? Overall, SOX seems to have put the fear of God in companies from doing anything out of the ordinary. It has resulted in stifling innovation in many companies. It may not seem like it from the outside - companies like Apple are still releasing new products after all - but behind the scenes, SOX has made innovation more difficult.
How? First, SOX brought the need to have written rules (policies, procedures, controls) for seemingly everything. More rules, less flexibility. Second, risks are now viewed more negatively than ever before. And not just accounting risks, but any business risk that could have a financial impact. Auditors don't like risks, and don't want their clients to have risks.
Innovation is often about doing something different, and it is much harder when there are more rules that govern what you are allowed to do. Innovation is also often times about taking risks, which is in conflict with how many organizations have adopted SOX.
I'm not saying rules are bad - I for one believe they are necessary, as long as they make sense. An area that they often don't make sense is in software selection. Some companies have, of their own initiative or through the scornful eye of their auditors, erected barriers for software selection so high that they prevent companies from buying cutting edge products that might still be in beta, or products sold by start-ups with no track record, or products delivered through the cloud. You guessed it - all too risky in the eyes of the auditor. Companies end up taking the safe route. You "never get fired for choosing IBM" - even if it costs ten times more than an innovative start-up product.
I recently received an I-kid-you-not 150-question IT checklist from a prospective customer that "needed it completed to comply with SOX." I have no problem answering good IT questions that help a customer determine which solution is right for them. In this case though, there wasn't a single useful question anywhere in the checklist. Literally, not one. "Does the vendor have password rules" and "Does the vendor use antivirus software" are frankly ridiculous questions that are not going to provide any reasonable information for system selection. Even if a vendor didn't have either of these - highly unlikely even for the smallest start-up - they would still answer yes. 150 questions later, the organization might have 'checked the box' on their due diligence procedure for SOX, but they have not in any way reduced their risks. In fact, they only thing they accomplished was tilting the selection in favor of the biggest vendors that employ armies of people to answer ridiculous questionnaires.
As companies grow they are forced under their own weight to institutionalize their processes, and that very action can limit their innovative potential. SOX has simply tripled that weight. According to the SEC, SOX compliance costs more than $2.3 million in direct costs at the average company. If those are the direct costs, it makes you shudder to think about what the indirect long-term costs will be.
Don't miss an article - Subscribe to our RSS feed and join our Continuous Innovation group!
Rocco Tarasi was an accountant, investment banker, and CFO before becoming a technology entrepreneur. He writes about innovation at www.InnovationMinute.com with a focus on "everyday" innovations in business models, sales strategies, products and services.Labels: Innovation, Rocco Tarasi

![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=89b53140-460a-4d2c-8848-f53096fc0274)

There are more innovations occurring in healthcare than anyone can count or keep track of, but I was particularly interested in these four - three that I've experienced personally and one that I've read about. They include a new product, a new pricing philosophy, a new business model, and a new distribution model.![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=15e07312-0dc3-4b22-a6ba-d8fd6c07a93e)
There are a lot of easy answers to this question, but the easy ones are not necessarily the correct ones. ![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=97f3338c-2b8a-4945-a122-f65cb18899a1)
I was reading ![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=efd3ae93-55b3-408d-ac7a-a5f39a70673b)
It is one of the largest industries in the United States, with over $1 trillion dollars spent annually. You are a consumer in this industry practically from birth until death. And yet most believe that the industry has lagged the pace of innovation so much that the education market today is comparable to the newspaper industry of 1999 - enjoying healthy profits before innovative start-ups disrupt their existing (archaic) business models.
A North Carolina principal was 







