Big4Guy

Companies normally prepare a lot of documentation for Sarbanes Oxley compliance. Such SOX documentation should be reviewed by the control owner for completeness and accuracy to ensure that there are no documentation gaps. Once reviewed, it is very important for the process owners to give their sign-offs for such documentation. SOX best practices require that a physical sign off is required for created deliverables. Following are some of the main criteria that should be looked into while completing the deliverable sign-offs. In other words sign offs should be for all the documents mentioned below.

1. All key controls are documented in the risk and control matrix. Accuracy and completeness of the controls are important.

2. Identified controls mitigate the risk. In case control activities do not mitigate the risk, ways to improve the controls are identified and documented.

3. Flowcharts which are used to document the processes should also be signed off. Flowcharts should have a complete and accurate description of the process as far as possible.

Related Posts

Adverse Report on Internal Controls
Sarbanes Oxley Approach for Small Business
Clause 49 Listing Agreement India
SOX 404 Cost of Internal Controls