The time to develop a plan of action for the Canadian rules on the Sarbanes-Oxley Act (known as “Bill 198” or “CSOX”) was December 31, 2006, and to put them into operation by end of December, 2007.
Controls which have been developed and templated by Symantec for use with Symantec Enterprise Security Manager to manage SOX compliance in the US, are equally valid and useful in managing CSOX compliance in Canada.
This paper seeks to show how the Canadian Securities Administrators’ rules contained in Multilateral Instruments 52-108 (Auditor Oversight), 52-109 (Certification of Disclosure in Companies’ Annual and Interim Filings) 52-110 (Audit Committees), 52-313 (Reporting on Internal Controls) map to the equivalent US legislation known as the Sarbanes-Oxley Act of 2002, to identify similarities and differences, in order to permit organizations to use the Symantec ESM Policy for Sarbanes-Oxley Act for applicable platforms by issuers subject to the CSA Multilateral Instruments.
This white paper includes discussion on the following topics:
- About ESM
- Introducing the Canadian Legislative Framework3
- Key Differences
- Implementing ESM
- Mapping SOX to CSA Multilateral Instruments