risk assessment
- Internal controls risk assessment
- SOX (404) testing and evaluation of current practices
- Critical and non-critical system identification
- Threat, risk, and vulnerability assessment and documentation
- Assessment of detection and monitoring activities
financial information
- Consultation with management for preparation of financial information and distribution of significant findings
- Communicate findings with process owners, senior management, and external auditors
- Review and document agreed-upon procedures with management
- Assist in the preparation of Audit Committee presentations to communicate test results and remediation status
process review
- Review and assess current financial practices/policies and procedures
- Procedure and control gap identification
- Walkthroughs and interviews with key process owners
- Narratives: creation/evaluation of internal control documentation
- Workflows: creation and evaluation of information/data flow, including control points
follow-up
- Review and develop process for tracking outstanding management action items
- Reporting and validation of process and satisfactory resolution of findings
- Review and advise on continuous monitoring efforts
- Assessment of follow-up engagement testing and procedures
implementation
- Develop policies and procedures for key areas and functions
- Substantive testing procedures of company's internal controls
- Advise on remediation of process breakdowns and control gaps
- Develop and implement an awareness plan for personnel to mitigate potential risk exposure
- Control matrix and risk analysis development
- Align controls and procedures with COSO/COBIT framework and best practices