Ensuring Ongoing Cost-Effective Compliance
Many companies will achieve first year Sarbanes-Oxley compliance by relying on special projects run in parallel with day-to-day
operations to find the quickest/easiest way of documenting business processes and controls.
However Sarbanes-Oxley (SOX) compliance is not a special, one-off event. Management are required to attest annually to the
effectiveness of the internal control framework.
In a world of frequent reorganisations and reallocations of responsibilities, IT system rollouts and upgrades, and the rapid
introduction of new products and services, historical evidence supports the use of the following:
- Enterprise Risk Management– Utilising Enterprise Risk Management tools that document
risks and controls in a flexible, configurable environment. <More>
- Knowledge Management– Providing knowledge frameworks and assessment mechanisms to ensure
staff are fully capable of performing their role and supporting their given processes. <More>
- Process Management – Ensuring processes are sufficiently defined and managed to ensure
ongoing adherence whilst supporting ongoing business change. <More>
|
