|
SARBANES-OXLEY
COMPLIANCE KNOWLEDGE & EXPERTISE
Examination and Assessment of Internal Controls
- risk assessment/management
and compliance audit program development
- scoping and planning (significant accounts (re materiality/fraud risk), accounting
judgements, disclosures, representations)
- internal control management processes (all business processes/cycles, compliance
testing, management signoff)
- integration of internal control/internal audit and Sarbanes Oxley requirements
Examination
of Responsibility Distribution and Reporting Requirements
- global operations and local operating company (international
experience)
- stakeholder group and Audit Committees (partnering with both internal and external auditors)
- employees
(e.g., division, department, functional area, strategic partners and 3rd-party providers)
Examination of Internal
Financial Controls
- entity level risks and controls (including standards, policies, and operating procedures, codes
of conduct etc.)
- business cycles/processes (payroll, financial close, inventory, treasury, tax, fixed assets, expenditure,
revenue)
- financial reporting risks and controls (including 3rd party providers, plus segregation of duties analysis)
- IT application and general controls (including end-user computing and legacy applications)
- anti-fraud programs
- protection of intellectual property
- business continuity/resumption planning
Risk Management (for legal
entity, enterprise and area-specific risks)
- internal control framework (COSO, CoBiT, Bill 198)
- identification
and analysis; risk library maintenance
- actual vs. desirable controls; prevent vs. detect controls; manual vs. automated
controls
- deficiency remediation project plans and status monitoring
- audit preparation; responses to auditor findings
-
ongoing management of related risks (integration of Internal Control/Internal Audit and SOX activities)
Design and
quality assurance review of Internal Audit Plans and Programs (SOX, Bill 198)
- IT Audit Plans
- SOX and other regulatory
compliance Aadit plans
- Operational Audit Plans
|
