Sarbanes-Oxley is Paying Off for Companies Despite Increased Costs and Hours, Protiviti Survey Finds

Press Release

​Investments in Sarbanes-Oxley compliance efforts differ vastly by organization

​MENLO PARK, CA – June 2, 2016 – According to Protiviti’s 2016 Sarbanes-Oxley Compliance Survey, companies continue to invest more time and money in their Sarbanes-Oxley (SOX) compliance activities, driven by forces that include organizations that are changing and growing and increased regulatory scrutiny. With this continued investment, however, companies are reaping notable benefits from their compliance efforts through improved internal control structures and business processes, which in turn have positive ripple effects throughout the organization as a whole.

The survey report, Understanding the Costs and Benefits of SOX Compliance, which was released today, culled data from more than 1,500 respondents who participated in the survey during the first quarter of 2016. The extensive report provides a detailed look into the wide array of SOX costs and hours across different sizes and types of companies, and explores how factors such as industry, category (public vs. private), maturity and size of the organization, along with its SOX compliance progress and SOX filing status, affect average annual SOX compliance expenditures.

“With the amount of time and money invested in Sarbanes-Oxley compliance on the upswing, we’re pleased to see the growing investment is paying off, with more companies reporting better and more streamlined internal control structures and business processes,” said Brian Christensen, executive vice president with Protiviti and leader of the firm's global Internal Audit and Financial Advisory practice. “Companies understandably would prefer to spend less time and money on their compliance efforts, but the Sarbanes-Oxley Act was created to improve the quality and reliability of internal control over financial reporting structures in organizations. We’re excited to see that this intention is already actualized in many of the companies surveyed.”

Not surprisingly, the largest companies (annual revenues of $20 billion or more) spend the most on their internal SOX compliance costs (which, for the purposes of this study, include fees for third-party co-sourced or outsourced providers, but exclude external auditor fees). Below that level, however, compliance costs are relatively consistent until annual revenues drop below $500 million:

Size of Organization
Average Annual SOX Compliance Costs
​$20 billion or greater
​$10b to $19.99 billion
​$5b to $9.99 billion
​$1b - $4.99 billion
$500m to $999.99 million
​$100m to $499.99 million
​Less than $100 million

Similarly, companies responding to the Protiviti survey said the number of hours they devoted to SOX compliance increased in fiscal 2015 as summarized below:

Size of Organization
​Hours devoted to SOX compliance increased
Hours devoted to SOX compliance increased more than 10 percent​
​$20 billion or greater
​$10 billion – $19.99 billion
​$5 billion – $9.99 billion
​$1 billion – $4.99 billion
​$500 million – $999.99 million
$100 million – $499.99 million
​Less than $100 million

Many respondents reported that their SOX compliance efforts have brought about positive effects to their organization. Among the companies with mature SOX compliance processes, two out of three believe there have been significant or moderate improvements to the internal controls associated with their financial reporting structures. Perhaps most important, however, is that organizations are leveraging their SOX compliance efforts to drive continuous improvement of their business processes, illustrating the lasting beneficial implications of this effort.

“More and more are realizing that if they approach their compliance processes in the right way, employing proven best practices such as automating more of their key controls, there will be positive ripple effects throughout their organizations,” said Christensen.

Webinar and Other Resources Available

Protiviti will conduct a complimentary webinar about the survey results on June 9, from 10:00-11:30 a.m. PDT. Moderated by Christensen, speakers will include Julie Cochrane Meyer, senior VP and chief audit executive, Marriott Vacations Worldwide, along with Protiviti Managing Directors Terry Hertzog and Nichole Minice and Director Edna Lopez. CPE credits (1.5) will be given to qualifying participants for this 90-minute webinar.

The survey report, Understanding the Costs and Benefits of SOX Compliance, along with an infographic, a video and a podcast featuring Christensen sharing insights about the survey data are available for complimentary download at


Protiviti is an Equal Opportunity Employer M/F/Disability/Veterans.

Protiviti is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website:

For questions regarding our CPE program or for information regarding our administrative policies such as complaint and cancelation, please contact [email protected]

About Protiviti Inc.

Protiviti ( is a global consulting firm that delivers deep expertise, objective insights, a tailored approach, and unparalleled collaboration to help leaders confidently face the future. Protiviti and its independent and locally owned Member Firms provide clients with consulting and managed solutions in finance, technology, operations, data, analytics, governance, risk and internal audit through its network of more than 85 offices in over 25 countries.

Named to the 2021 Fortune 100 Best Companies to Work For® list, Protiviti has served more than 60 percent of Fortune 1000® and 35 percent of Fortune Global 500® companies. The firm also works with smaller, growing companies, including those looking to go public, as well as with government agencies. Protiviti is a wholly owned subsidiary of Robert Half (NYSE: RHI). Founded in 1948, Robert Half is a member of the S&P 500 index.

Ready to work with us?

Kathy Keller
Kathy Keller