A few years ago, a large telecommunications company was chasing the clock with its end-of-year Sarbanes-Oxley (SOX) requirements. For anyone who’s ever dealt with SOX compliance, this is neither uncommon nor surprising. But the deadline was looming, and they were still staring at a mountain of work.
The company’s controller had worked with RSM US LLP in the past, and he reached out in hopes it could pull an 11th-hour rabbit out of its hat. RSM accepted the challenge and deployed some of its specialists who had lived and breathed challenging year-end environments. Within days, the team of professionals was onsite, integrating into the telecom company’s staff, providing project management, and ultimately scaling the mountain of SOX work.
Fast-forward a few months, and the telecom company’s management team asked RSM if it would be interested in bidding on their outsourced internal audit and SOX work. They explained to RSM that they wanted to rethink the way they were conducting their program. RSM drew on its firsthand experience and presented a proposal that tackled the telecom company’s greatest business challenges through internal audit. Up against the Big Four and other middle market competitors, RSM won the bid.
A new way of thinking
Part of RSM’s winning proposal was addressing the telecom company’s impending implementation of new systems. The company was embarking on some major technology transformations—including new Salesforce CRM and Oracle Cloud ERP solutions—and RSM proposed their internal audit function be a critical part of those changes.
RSM proposed deploying internal audit– and risk management–related resources with technical skills in the technologies the telecom company was adopting and offered to work directly with the company as it went through those major infrastructure changes.
For the next two years, RSM continued to perform its more traditional internal audit function, physically embedded with the telecom company and handling its SOX compliance. However, it was the more forward-thinking, dynamic usage of internal audit in the two system implementations that commanded the most time and attention. RSM’s internal audit team—now including Salesforce and Oracle team members brought on from RSM’s deep bench of specialists—helped the telecom company identify significant technical improvement opportunities to mitigate risk across those system implementations. This agile mindset laid the groundwork for the telecom company’s greatest internal audit success yet.