【正文】
ng automated application controls can be especially effective for panies using purchased software when the possibility of program changes is remote—., when the vendor does not allow access or modification to the source code” ( PCAOB 2021, B28, B32) . Since ERP systems are purchased software, in contrast to legacy systems, which are developed and maintained internally, pany employees would most likely have access to the source code for legacy systems, but not for ERP systems. Given all of these factors, one would expect ERP systems to have a positive impact on the effectiveness of internal controls over financial reporting. However, a counter argument could be made that just because panies implement ERP systems, they may not take advantage of all the builtin control features. It is possible, for instance, that during implementation, some of the control features might not be activated. Or, in a more sinister view, senior management may opt to override control features in order to manipulate data to “manage earnings.” This argument would be more consistent with Brazel and Dang ( 2021) , who argue that increased control by senior management over financial data in a centralized ERP system will lead to an increase in earnings management. In support of their argument, they cite prior research that finds reductions in audit and internal control quality following ERP adoption( Bagranoff and Vendrzk 2021。Brazel and Agoglia 2021) . But Brazel and Dang ( 2021) also point out that most of this research, including theirs, relates to implementations that took place during the early years of ERP adoption, prior to SarbanesOxley, and argue that it is possible that these safeguards have since improved. 第 13 頁 共 13 頁 Indeed, the increased emphasis on internal controls following SOX makes it likely that firms that adopted ERP systems early in the cycle have since taken advantage of the builtin features to improve their internal controls, which leads to the following hypothesis stated in the alternate form. 。 Hunton et al. 2021。 Doyle et al. 2021). Section 404, which requires a much more extensive review of internal controls, became effective in 2021 under a twophase schedule. In the first phase, pliance is required for panies known as accelerated filers in annual reports for fiscal years ending on or after November 15, 2021 SEC 2021. The second phase, which includes pliances for all other panies, has been extended several times and is now effective for fiscal years ending on or after December 15, 2021, for the management report and June 15, 2021, for the auditor attestation report ( SEC 2021) .Although the exact form and language of the management report on internal controls may vary from one firm to another, the report must disclose if there are any material weaknesses in the internal controls over 第 11 頁 共 13 頁 financial reporting. Therefore, it is now possible to measure the effectiveness of internal controls by analyzing the material weaknesses disclosed in these reports. Section 404 has been used by researchers to examine such issues as the increased cost of audits ( Raghunandan and Rama 2021) , delays in audits ( Ettredge et al. 2021) , percent of filers reporting deficiencies ( Grant et al. 2021) , the relationship between internal control weaknesses ( ICW) and the cost of equity ( Ogneva et al. 2021。 internal control. I. INTRODUCTION The SarbanesOxley Act of 2021 ( SOX) requires panies to report on the effectiveness of their internal controls over financial reporting as part of an overall effort to reduce fraud and restore integrity to the financial reporting process. Software vendors that market enterprise resource planning ( ERP) systems have taken advantage of this new focus on internal controls by emphasizing that a key feature of ERP systems is the use of “builtin” controls that mirror a firm?s infrastructure. They emphasize these features in their marketing literature, asserting that these systems will help firms improve the effectiveness of their internal controls as required by SOX. These vendor statements motivate an interesting empirical research question about the impact of ERP systems on internal control. Specifically, are firms that implement ERP 第 7 頁 共 13 頁 systems more or less likely to report internal control weaknesses in their annual reports than firms that do not? Relatively little empirical/archival research has been conducted in this specific area, because prior to SOX, internal control data did not have to be publicly reported. This study addresses that gap in the literature by examining internal control data that is now available for