110 likes | 223 Vues
This presentation outlines the compliance initiatives of Océ, a leader in document management and printing solutions, in relation to the Sarbanes-Oxley Act of 2002. Key topics include business cycles, risk assessment strategies, and the benefits of robust internal controls. Océ's history in the pharmacy sector and its innovative printing technologies, including the Océ Varioprint and Arizona series, are highlighted. The discussion also focuses on the importance of control effectiveness and the impact of Sarbanes-Oxley on corporate governance and accountability.
E N D
Compliance for control Rob H. van Nie June 7, 2007
Agenda • About Océ • Sarbanes Oxley Act 2002: Sections 302 & 404 • Business Cycles • Diamond • Results • Benefits • Going Dutch
About Océ • History: pharmacy background, colloring margarine like butter • Océ enables its customers to manage their documents efficiently and effectively by offering innovative print and document management products and services for professional environments • Venlo based, own establishments in more than 30 countries, in a further 60 countries prominent distributors • 24.000 employees, total revenues > EUR 3.1 billion
About Océ • Entire value chain of printing systems: development, manufacturing, sales, financing, service of hardware and software • Printers for mid and high volume, A4 and wide format, black and white and colour* Océ Varioprint 6250: full duplex printer, 250A4 prints two sided per minute* Océ Arizona 250 GT: UV flatbed and roll-to-roll colour printer wide format • Innovative, beyond the ordinary, systematically focus on the future
Sarbanes Oxley Act 2002 • Driver for systematical approach of risk assessment and control • Section 302:* business risk self assessment by local management* corporate questionnaire* consolidation on group level* Disclosure Committee* Risk paragraph in annual report and Form 20F
Sarbanes Oxley Act 2002 Section 404 • Cycles* 13 companies ( “Tier 1”): Value Chain approach: MCM, BS, IS, MSP, AR, M&L, AP, HR, GL, FR* 4 data centers and centralised IT management: GITC* few companies (“Tier 2” and “Tier 3”): GL and FR* all companies world wide: ELC, FRA
Sarbanes Oxley Act 2002 Approach Group consolid Internal Auditor Management assessment Monitoring Sample testing External Auditor Managers review Control execution
Sarbanes Oxley Act 2002 Results • 2 unqualified opinions (control effectiveness and effectiveness of management assessment) • few significant deficiencies
Control Benefits • Control awareness, bottom up • Seggregation of duties, including ownership of system access rights • Understanding automated controls • Documenting control execution and management review • Improving customer services (tender process, order process, invoicing process) • Process harmonisation • Business - IT alignment