FinexGroup Leadership. Execution. Training.

Solutions for Finance Challenges

SOX/CSOX Independent Evaluation

For those public companies that have already completed the design and implementation of their internal control programs, the next challenge is to complete the evaluation phase. As companies work through the evaluation exercise, the amount of effort required for most firms can be overwhelming - particularly with day to day business activities that compete for our time and attention. Most companies also find it challenging to design and implement effective test plans for their disclosure, entity level and IT controls.

FinEx Group assists clients with evaluating their internal controls from numerous perspectives:

  • Developing an evaluation program roadmap so that each control, test, owner and timeline is clearly identified. This ensures that the evaluation program is managed effectively and staff responsible for performing the evaluation duties for each specific test within the internal control program know what is expected and when.
  • Developing an evaluation program that enables staff to perform the evaluations as part of their daily business activities throughout the year. This initiative will ensure that the “program” is not a one time “project” to be resurrected once a year as incremental work to the already overburdened finance and IT areas.
  • Developing an evaluation program that utilizes internal staff from other areas of the business. Apart from keeping the program internal, this approach will allow staff to cross train on processes in other functional or business unit activities.
  • Providing a training and education program for staff performing the evaluations to ensure that the evaluations are done properly and that individuals can understand how evaluations are done across the business to leverage best in class approaches.
  • Providing the expertise and credentials to perform independent evaluations of the internal controls by FinEx personnel across all control categories. In addition to transaction and IT controls, these evaluations would include the higher risk areas contained within Disclosure, Financial Reporting, Corporate Governance and Policies, and Management Controls. These independent evaluations could also be used by the external auditors as part of their audit or review of internal controls as required. This should reduce the time required to perform the audit as well as the audit fees.