SOX Testing, IT

One response

1. Hi there!

   For SOX (Sarbanes-Oxley Act) testing related to Information Technology, you can find controls and guidelines from several key sources:

   1. The Committee of Sponsoring Organizations of the Treadway Commission (COSO): COSO provides a widely accepted framework for internal controls that can be helpful for SOX compliance.

   2. The Public Company Accounting Oversight Board (PCAOB): Their website offers resources and guidelines related to auditing and internal controls for SOX compliance.

   3. Internal Control Frameworks: Look into the COBIT (Control Objectives for Information and Related Technologies) framework, which is specifically designed for IT governance and management. It provides a comprehensive framework for IT controls.

   4. AICPA (American Institute of Certified Public Accountants): They offer resources and guidance related to SOX compliance and internal controls.

   5. SOX Compliance Tools: Several software solutions provide templates and controls for SOX compliance, such as MetricStream, LogicManager, or RSA Archer.

   6. Professional Organizations and Forums: Joining organizations like ISACA or IIA can provide networking opportunities and access to resources tailored for IT controls and SOX testing.

   7. Consulting Firms: Many consulting firms offer SOX compliance services and may provide detailed documentation on controls that relate to your specific IT systems.

   8. Training and Workshops: Consider attending workshops or webinars focused on SOX compliance and IT controls to gain practical insights and access to resources.

   Feel free to explore these options, and good luck with your SOX testing efforts!

   Best regards!

   Log in to Reply