Sarbanes-Oxley Compliance (SOX)
Leading experts in SOX compliance. It’s what we do every day.
Protiviti has been a long standing and recognised global thought leader in SOX and Committee of Sponsoring Organisations (COSO) compliance. Our publications, benchmarking studies and global seminars are widely recognised in the marketplace and continually provide the latest regulatory and industry trends. Our clients benefit by having access to leaders with deep industry and subject matter expertise for whom SOX compliance is a principal focus.
We have served hundreds of clients with their SOX compliance needs that range from program builds to turn-key execution, to rationalisation and transformation.
Sarbanes-Oxley (SOX) act
Public company readiness – year one SOX
Establish a roadmap to comply with SOX 404 by right sizing your SOX program and infusing leading practices to build an effective, efficient, and sustainable control framework and program.
Assess your SOX compliance program to rationalise your controls and validate your overall approach. Our diagnostic services build upon years of SOX compliance activities and the application of SEC and PCAOB guidance.
Ongoing SOX compliance
Assess the effectiveness of your SOX program to ensure it adjusts to the changing needs of your organisation. Conduct training and awareness for executives, process, and control owners to ensure the requirements of Sarbanes-Oxley (SOX) act are met. Establish a controls-mindset in the organisation.
Understand how technology impacts your control environment and identify optimisation opportunities by evaluating control design and operating effectiveness of application and IT general controls, as well as the impact of major technology projects (e.g., ERP implementations).
SOX transformation & innovation
Test faster and more accurately by leveraging our testing accelerators, proprietary data-driven control testing tools, and Control Testing and Innovation Center services, as well as our network of global delivery centers.
Efficiency. Effectiveness. Sustainability.
Protiviti assists companies in designing SOX programs that deliver upon compliance objectives, without putting undue strain on the organisation. We are experts and have years of proven SOX experience, working with newly public to the largest global organisations. Our global network of SOX specialists continually monitors developments and changes within the landscape. Protiviti's approach
- Risk assessment, scoping & project management
- Walkthrough & control design assessment
- Testing of operating effectiveness
- Aggregation & evaluation of deficiencies
- Monitoring and validation of remediation activities
- Reporting of results to management
- External auditor liaison
Podcast | The Evolution of SOX: Tech Adoption and Cost Focus Amid Business Changes, Cyber and ESG Mandates
Internal Auditing Around the World®
Setting the 2023 Audit Committee Agenda
Assessment Questions for Audit Committees to Consider
IT Audit Perspectives on Top Technology Risks
As internal audit organisations look for effective ways to perform their work in a more agile manner, including how to leverage methodologies, data and technology to add value and become strategic advisers to their business partners, many are finding that the use of robotic process automation (RPA) checks a lot of boxes.
RPA integration into internal audit functions is expanding and improving productivity across many different sectors. In a recent successful engagement, Protiviti was retained by the internal audit team of a Fortune 500 organisation to help automate functions within their department. The objective was to use RPA to reduce manual effort, improve testing coverage and increase the reliability of Sarbanes-Oxley (SOX)-related IT controls testing.
The engagement team reviewed the SOX IT controls library to identify controls that would be best suited for automation. The goal of the exercise was to find automation candidates that would yield higher value with relatively low effort. The controls were evaluated and categorised according to value or potential benefits (e.g., time savings, enhanced risk monitoring) and automation complexity (e.g., system dependencies that could make the automation process difficult).