News for hackers. Stuff that matters.
Re:Global Audit Firms Are Lobbying to Dilute Sarbanes-Oxley... by maxxxxx on Friday May 12, 2017 @11:57AM (#14325093)
Reminds me a little of the medical device industry. We do a lot of things that from an engineering perspective result in worse products but since nobody understands the regulations fully we do them. Until a new guy comes in, re-reads the rules and says we can do it differently now.
Re:Global Audit Firms Are Lobbying to Dilute Sarbanes-Oxley... by refurb on Friday May 12, 2017 @09:24PM (#14329136)
I work in the biotech industry and it's the exact same way. We have legions of lawyers who try and decipher the regulations.

A great example is price reporting to the gov't. You're supposed to report your net price across all sales to CMS on a quarterly basis. Problem is, the regulations are so vague that it falls on companies as to how to interpret them. Naturally, companies err on the conservative side (at least most of them). My old company probably had 20 FTE's dedicated to this one regulation.

And if you reach out to the regulatory body for clarification, that's a multi-year process. A great example is the AMP rule (average manufacturer price). I think CMS was supposed to role out the clarification back in 2012, but only finalized it last year. And there are still unanswered questions.

Re:Global Audit Firms Are Lobbying to Dilute Sarbanes-Oxley... by arethuza on Friday May 12, 2017 @12:08PM (#14325188)
If you think SOX is bad try finding someone to tell you exactly what you need to do to be ITAR compliant!