Sarbanes Oxley requires quite a bit of documentation of entity's
controls. Every little detail right from the business process to the controls within the process, the associated risks etc need to be well documented to enable the external auditor to reach a conclusion on internal control over financial reporting. This brings us to the question that, if documentation is so important, why not have documentation standards and documentation templates which support the SOX compliance process.
Most companies I have worked with have some documentation standards and
templates which are used in the controls compliance. Specifically,
documentation standards should lay down the level of detail and accuracy
required in the SOX documentation phase. The biggest benefit of having
documentation standards is that it helps in identification of key
controls.
See full Article.
Posts
