Trinity Industries Case Study: Trinity's Work Environment

1002 Words3 Pages

Trinity Industries passed their SOX compliance in 2004 by applying the bottom-up approach in identifying the gaps and the lack documentation controls. Bottom-up approach looks at individual base elements of a system first and then those elements are linked together to form a larger subsystems. Trinity used this method to figure out where the material weakness for SOX compliance were and to organize a system to fix the problems. This process involved Trinity going into the BUs work environment, collecting information form the employees, observing the flow process, collecting data on the system gaps and documentation, correcting the weakness, and educating the employees in the correct process. Some of the weakness in this approach were, over …show more content…

To determine all the possible weakness, they used the bottom-up approach and it was successful because they passed the SOX audit. I think this was the best option for their first year compliance because this was a new regulation and taking all precaution was necessary. One thing they could have done differently is, selected the areas in the BUs that had a material effect on the financial statements and controls. This would have decrease the cost and time used to test the process. After this approach, Trinity understood their company’s process and in the following year they could us the top-down risk approach to save cost and …show more content…

• Classification of controls into categories of importance.
• Have meeting with all level of management and employees to cover the SOX compliance.
Trinity installed the Oracle system (EDP) which centralized their financial data of all the BUs in one system to have reliability and accountability of their financial statements. This system combined four ledgers in one system and save Trinity $.5 million annually in SOX compliance expense. This system improved their reporting process, timely closing of books, and availability of financial information. This systems left little room for misrepresentation of their financial statements which satisfied some of the SOX requirements.
The testing process that Trinity performed to design their controls are listed below. These testing process uncovered where Trinity was miss controls and they took appropriate approach in designing a system to correct these controls.
• Interviewing the organization member to understand the process and where the controls were missing.
• Documenting the finding in flowcharts, control matrices, and gap-analysis.
• Shared with organization members for feed-back and

Open Document