View CartView Cart

QuestionsContact Us

Services

Sarbanes-Oxley (SOX) 404 Compliance Assistance

We assist organizations that need help achievingcompliance with the requirements of section 404 of the Sarbanes-Oxley (SOX) Act, need confidence in the quality of the information produced by their IT systems, or need an independent review of their control structure, including identification of weaknesses and possible design enhancements:
  • We help clients select appropriate internal control frameworks for relevant business process areas under 404 based on the risk assessments, and the degree of complexity and importance involving the controls. We are proficient with COSO standards and COBIT protocols to ensure compliance and to establish long-term process efficiency.
  • We perform and document actionable risk assessments, identify key processes underlying financial reporting risk, identify types of controls to test, and develop testing strategies. 
  • We assist with tests of operating effectiveness of controls for various IT organizations including IT general computer controls (operations, information security, change management, backup and recovery, etc.), business process controls, and automated application controls.
  • We identify control weaknesses in IT and business processes. We also formulate value-based remediation strategies to mitigate identified deficiencies. 
  • We consistently reduce expected SOX 404 audit durations by delivering project requirements timely and in a manner understood by department management and external auditors.
  • We work closely with management to streamline and enhance Sarbanes-Oxley methodology.
  • We work with external auditors to determine reliance approach on management’s work to streamline compliance procedures and reduce the time and resource requirements for the 404 certification.