Which of the following is a component of the Sarbanes-Oxley Regulations?

The Sarbanes-Oxley Act (SOX), specifically Section 404, mandates that the management of public companies establish and maintain an adequate internal control structure for financial reporting. A fundamental principle of effective internal controls is the separation of duties (also known as segregation of duties). This principle is a key control activity designed to prevent fraud and error by ensuring that no single individual has control over all aspects of a transaction. The Committee of Sponsoring Organizations of the Treadway Commission (COSO) framework, which is the most widely used framework for SOX compliance, explicitly identifies separation of duties as a critical control activity.

B. ethical business practices: This is a broad outcome of SOX (e.g., Section 406 Code of Ethics), but 'separation of duties' is a more specific, mandated internal control mechanism.
C. elimination of bribery: This is the primary objective of specific anti-corruption laws like the U.S. Foreign Corrupt Practices Act (FCPA), not the Sarbanes-Oxley Act.
D. environmental protection: This falls under the purview of separate environmental legislation and regulatory bodies and is outside the financial reporting scope of SOX.

1. U.S. Securities and Exchange Commission (SEC). (2003). Final Rule: Management's Reports on Internal Control Over Financial Reporting and Certification of Disclosure in Exchange Act Periodic Reports. Release No. 33-8238. Section II.A.2, "The Framework for Evaluation," states that management must base its evaluation on a suitable, recognized control framework, citing the COSO framework as an example. Available at: https://www.sec.gov/rules/final/33-8238.htm

2. Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2013). Internal Control – Integrated Framework: Executive Summary. Page 6. The framework outlines "Control Activities" as one of the five essential components of internal control. The detailed principles supporting this component explicitly include the "segregation of duties."

3. Ramos, M. (2004). Auditor's Responsibility for Fraud Detection. Journal of Accountancy, American Institute of Certified Public Accountants (AICPA). This article discusses how SOX increased auditor responsibilities and emphasizes the importance of internal controls like segregation of duties in preventing and detecting fraud.

4. Grama, J. L. (2015). Legal and Privacy Issues in Information Security. Jones & Bartlett Learning. Chapter 2, "Laws and Regulations," clearly distinguishes the purpose of SOX (financial reporting integrity) from the purpose of the FCPA (prohibiting bribery of foreign officials).