What is the primary objective of J-SOX?

J-SOX's primary objective is to ensure the reliability of financial reporting through effective internal controls over financial reporting (ICFR) for listed companies. Embedded in the Financial Instruments and Exchange Act (FIEA) promulgated June 14, 2006, it requires management to establish, evaluate, and report on ICFR, supported by Business Accounting Council (BAC) Implementation Guidance from February 2007. Effective April 2008, it covers consolidated financial statements, Securities Report disclosures, asset preservation, and IT response, using a principles-based, risk-focused approach aligned with COSO's five components plus IT governance.

Who is legally or professionally required to comply with J-SOX?

J-SOX applies to roughly 3,800 listed companies in Japan and their foreign subsidiaries, effective April 2008. Under FIEA, management of these entities must design, assess, and report on ICFR, with external auditors attesting to the reliability of management's report. Scope includes processes feeding consolidated financials and equity-method affiliates, enforced by the Financial Services Agency (FSA).

Does J-SOX require an external audit or third-party certification?

Yes, J-SOX requires external auditors to audit and attest to the reliability of management's ICFR assessment and report. Management performs the evaluation; independent accountants provide assurance on its credibility, per BAC Guidance, without replicating all management procedures.

How often should an assessment for J-SOX be performed?

J-SOX assessments are performed annually as part of fiscal year-end reporting, with ongoing monitoring required. Management evaluates ICFR effectiveness at fiscal year-end, supported by continuous monitoring, separate evaluations, and updates for significant changes like system implementations or acquisitions.

What are the consequences of non-compliance with J-SOX?

Non-compliance with J-SOX risks FSA enforcement, fines, listing suspension, reputational damage, and market penalties. Material weaknesses in ICFR reports can lead to share price declines up to 19% and audit cost increases over 60%, with personal liability for executives on false certifications.

Can J-SOX be mapped to other international frameworks?

No, these FAQs focus solely on J-SOX and do not address mappings to other frameworks. J-SOX uses COSO's five components (Control Environment, Risk Assessment, Control Activities, Information & Communication, Monitoring) augmented by IT response, tailored to FIEA requirements.

What is the first step to begin implementing J-SOX?

The first step for J-SOX implementation is establishing governance with executive sponsorship and a cross-functional steering committee. Secure CFO/CEO commitment, define scope using materiality thresholds (e.g., 5% of pre-tax income), and adopt COSO for risk-based scoping of entity-level, process-level, and IT controls.

What is the primary objective of EN 1090?

EN 1090 ensures controlled execution and conformity assessment of structural steel and aluminium components for CE marking under the Construction Products Regulation (CPR). It comprises EN 1090-1 for conformity assessment via certified Factory Production Control (FPC) and Declaration of Performance (DoP); EN 1090-2 for steel execution requirements like welding, tolerances, and inspection; and EN 1090-3 for aluminium. Risk-based Execution Classes (EXC1–EXC4) scale controls based on Consequence Class (CC1–CC3), Service Category (SC1–SC2), and Production Category (PC1–PC2).

Who is legally or professionally required to comply with EN 1090?

Manufacturers of load-bearing steel and aluminium structural components and kits for permanent incorporation in EU construction works must comply with EN 1090 to affix CE marking. This includes fabricators, welding shops, and suppliers to construction projects like buildings, bridges, and stadia. Compliance is mandatory for market placement in the EEA via CPR; non-structural or non-metallic products are excluded.

Does EN 1090 require an external audit or third-party certification?

Yes, EN 1090-1 mandates certification of the Factory Production Control (FPC) system by a Notified Body via AVCP systems. This involves initial inspection of the factory and FPC, issuance of a certificate enabling CE marking and DoP, followed by continuous surveillance audits to verify ongoing performance constancy.

How often should an assessment for EN 1090 be performed?

EN 1090 requires ongoing surveillance audits by the Notified Body after initial FPC certification, typically annually. Frequency follows EN 1090-1 Table B.3, scaled by Execution Class (EXC); higher EXC (e.g., EXC4) demands more intensive monitoring. Manufacturers must conduct internal audits continuously and notify the Notified Body of changes.

What are the consequences of non-compliance with EN 1090?

Non-compliance with EN 1090 prevents lawful CE marking, risking market exclusion, product withdrawal, and CPR enforcement. Notified Bodies may suspend or withdraw FPC certificates for major non-conformities, publicizing status; manufacturers face liability for structural failures, fines, and reputational damage.

Can EN 1090 be mapped to other international frameworks?

EN 1090 integrates with standards like ISO 3834 for welding quality, but no direct mappings to unrelated international frameworks are specified. Focus remains on EN 1090's internal requirements for FPC, execution classes, and CPR conformity.

What is the first step to begin implementing EN 1090?

The first step is to determine product scope and Execution Class (EXC1–EXC4) via risk assessment of consequence, service, and production categories. Default to EXC2 if unspecified, then conduct a gap analysis of current FPC against EN 1090-1.

Standards Comparison

J-SOX vs EN 1090

J-SOX

Mandatory

2008

Japanese regulation for ICFR in listed companies

EN 1090

Mandatory

2009

EU standard for steel and aluminium structural execution

Quick Verdict

J-SOX mandates ICFR for Japanese listed firms via management assessment and audits, ensuring financial reliability. EN 1090 requires CE marking for EU structural steel/aluminium via FPC certification. Companies adopt them for regulatory compliance and market access.

Financial Reporting

J-SOX

Financial Instruments and Exchange Act (FIEA)

Cost

€€€€

Complexity

High

Implementation Time

12-18 months

Key Features

Mandatory ICFR for 3,800 listed companies and subsidiaries
Principles-based flexibility with rigorous documentation demands
Explicit IT controls as core framework component
Management assessment plus external auditor attestation
Risk-based scoping aligned to COSO framework

Structural Metalwork

EN 1090

EN 1090 Execution of steel and aluminium structures

Cost

€€€€

Complexity

High

Implementation Time

6-12 months

Key Features

Factory Production Control (FPC) certification
Execution Classes (EXC1-EXC4) risk scaling
CE marking for EU market access
Welding coordination via ISO 3834
Material traceability and NDT requirements

Detailed Analysis

A comprehensive look at the specific requirements, scope, and impact of each standard.

J-SOX Details

What It Is

J-SOX, or Japan's Financial Instruments and Exchange Act (FIEA) internal control provisions, is a regulatory framework mandating internal controls over financial reporting (ICFR). Effective April 2008 for ~3,800 listed companies and subsidiaries, it ensures reliable financial disclosures via principles-based, risk-based management assessment and auditor review.

Key Components

Five COSO components plus explicit Response to IT.
Covers entity-level, process-level, and IT general controls (ITGCs).
Focuses on material misstatement risks, key controls, and Securities Report disclosures.
Management evaluates; auditors attest to report reliability.

Why Organizations Use It

Enhances investor confidence, reduces restatement risks, and lowers capital costs. Mandatory for listed firms; provides governance signaling, operational efficiency, and IT resilience. Mitigates fraud, improves processes amid auditor shortages.

Implementation Overview

Phased: governance setup, risk scoping, control design, testing, reporting. Applies to listed/multinational entities in Japan; requires documentation, ITGCs, continuous monitoring. No certification but annual FSA-regulated disclosures and audits.

EN 1090 Details

What It Is

EN 1090 is a harmonized European standard family for the execution of steel and aluminium structures, enabling CE marking under the Construction Products Regulation (CPR). It provides technical requirements and conformity assessment for load-bearing components in construction works, using a risk-based approach via Execution Classes (EXC1-EXC4).

Key Components

**EN 1090-1Conformity assessment, Factory Production Control (FPC), Declaration of Performance (DoP).
**EN 1090-2/3Technical rules for steel/aluminium (welding, tolerances, corrosion protection, inspection).
Core principles: traceability, welding coordination (ISO 3834), NDT scaled by EXC.
Certification model: Notified Body audits FPC with ongoing surveillance.

Why Organizations Use It

Mandatory for EU market access via CE marking.
Reduces liability, ensures safety in high-risk structures.
Builds capability in welding/traceability for competitive tenders.
Enhances stakeholder trust through certified quality.

Implementation Overview

Phased: gap analysis, FPC development, personnel training, NB certification. Applies to fabricators in EU/EEA; 6-12 months typical for medium firms.

Key Differences

Aspect	J-SOX	EN 1090
Scope	Internal controls over financial reporting (ICFR)	Execution of steel/aluminium structural components
Industry	Listed companies in Japan and subsidiaries	Steel/aluminium fabrication in EU construction
Nature	Principles-based securities law requirement	Harmonized standard for CE marking under CPR
Testing	Management assessment + external audit review	Factory Production Control certification + surveillance
Penalties	FSA fines, reputational damage, market consequences	Market exclusion, certificate suspension, legal liability

Scope

J-SOX

Internal controls over financial reporting (ICFR)

EN 1090

Execution of steel/aluminium structural components

Industry

J-SOX

Listed companies in Japan and subsidiaries

EN 1090

Steel/aluminium fabrication in EU construction

Nature

J-SOX

Principles-based securities law requirement

EN 1090

Harmonized standard for CE marking under CPR

Testing

J-SOX

Management assessment + external audit review

EN 1090

Factory Production Control certification + surveillance

Penalties

J-SOX

FSA fines, reputational damage, market consequences

EN 1090

Market exclusion, certificate suspension, legal liability

Frequently Asked Questions

Common questions about J-SOX and EN 1090

J-SOX FAQ

EN 1090 FAQ

You Might also be Interested in These Articles...

The Tool Landscape for Reaching and Maintaining ISO 27701 Compliance

Discover the top tools for ISO 27701 compliance. Compare functionality, complexity, costs, and benefits to choose the best solution for your privacy program. Ac

Top 10 Reasons ISO 27701 is the Ultimate Privacy Boost for Your ISO 27001 ISMS in 2025

Extend ISO 27001 with ISO 27701 for ultimate privacy governance amid GDPR & AI regs. Discover top 10 advantages like integrated audits to future-proof your ISMS

CIS Controls v8.1 for Cloud & SaaS: A Practical Safeguard Playbook for AWS/Azure/GCP and Microsoft 365

Turn CIS Controls v8.1 into a cloud-first playbook for AWS, Azure, GCP & Microsoft 365. Get actionable IaaS/PaaS/SaaS safeguards, automation patterns, evidence

Run Maturity Assessments with GRADUM

Transform your compliance journey with our AI-powered assessment platform

Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.

100+ Standards & Regulations

AI-Powered Insights

Collaborative Assessments

Actionable Recommendations

Explore More Comparisons

See how J-SOX and EN 1090 compare against other standards

Other J-SOX Comparisons

Other EN 1090 Comparisons

What It Is

Key Components

**EN 1090-1Conformity assessment, Factory Production Control (FPC), Declaration of Performance (DoP).

**EN 1090-2/3Technical rules for steel/aluminium (welding, tolerances, corrosion protection, inspection).

Core principles: traceability, welding coordination (ISO 3834), NDT scaled by EXC.

Certification model: Notified Body audits FPC with ongoing surveillance.

Aspect

J-SOX

EN 1090

Scope

Internal controls over financial reporting (ICFR)

Execution of steel/aluminium structural components

Industry

Listed companies in Japan and subsidiaries

Steel/aluminium fabrication in EU construction

Nature

Principles-based securities law requirement

Harmonized standard for CE marking under CPR

Testing

Management assessment + external audit review

Factory Production Control certification + surveillance

Penalties

FSA fines, reputational damage, market consequences

Market exclusion, certificate suspension, legal liability