SOX Section 302
SOX Section 302 requires the principal executive officer and principal financial officer of a U.S. public company to personally certify in each annual and quarterly SEC report that they have reviewed the filing, that it does not contain any untrue statement of material fact, that the financial statements fairly present the company's financial condition and results, and that they have disclosed any significant deficiencies, material weaknesses, and fraud involving management to the auditors and audit committee.
Section 302 of the Sarbanes-Oxley Act of 2002, codified in Rules 13a-14 and 15d-14 under the Securities Exchange Act of 1934, was a direct legislative response to the pre-SOX era practice of executives distancing themselves from financial statement accuracy by claiming they relied entirely on subordinates and auditors. Section 302 eliminated that defense by requiring personal certifications attached to each Form 10-K and Form 10-Q filed with the SEC.
The certification covers four substantive areas. First, the certifying officers must state that they have reviewed the report. Second, they must certify that, based on their knowledge, the report does not contain any untrue statement of material fact or omit a material fact necessary to make the statements not misleading. Third, they must certify that the financial statements and other financial information in the report fairly present in all material respects the financial condition, results of operations, and cash flows of the company. Fourth, they must certify that they are responsible for establishing and maintaining disclosure controls and procedures and ICFR, have evaluated those controls as of the end of the period covered, and have disclosed to the audit committee and auditors any significant deficiencies, material weaknesses, and any fraud involving management or employees with a significant role in internal controls.
The consequences of a false Section 302 certification are severe. Criminal penalties under 18 U.S.C. Section 1350 (enacted through Section 906 of SOX) include fines up to $1 million and imprisonment up to 10 years for a knowingly false certification, with fines up to $5 million and imprisonment up to 20 years for willful violations. Civil enforcement by the SEC can include disgorgement of profits, officer and director bars, and injunctive relief.
For investors, the Section 302 certification is significant because it personalizes accountability for financial reporting accuracy to named executives. When a restatement or accounting fraud is later discovered, the existence of certifications signed by the CEO and CFO asserting the accuracy of the misreported statements is directly relevant to questions of knowledge, intent, and culpability. The certifications also serve as an indirect indicator of the quality of a company's disclosure controls — if the CEO and CFO are certifying accurate disclosures, they must have a reasonable basis for that certification in the form of functioning disclosure controls and procedures.