Audit Board

JANUARY 4, 2023

It’s been an interesting few decades, starting with companies struggling to get up to speed and into 2008, with the subprime mortgage and housing crash and added scrutiny applied to auditors and SOX. By increasing efficiency and streamlining SOX programs , resources are freed up for other important initiatives.

Compliance 52

Compliance Start-ups Technology Finance 52

Audit Board

SEPTEMBER 15, 2022

Your organization’s SOX operating model is the core of your SOX program. Accordingly, your choice of operating model has a massive impact on your ability to plan and execute an efficient, effective, high-quality SOX program. Understand the Four SOX Operating Models. Understand the Four SOX Operating Models.

Compliance 52

Compliance Technology 52

Audit Board

NOVEMBER 16, 2022

and John Kolich, IT Audit Director at Jushi, share how AuditBoard enabled their team to achieve first-year SOX compliance at a rapidly scaling company without having to add resources. Achieving goals of successfully becoming SOX compliant while executing on audits for a scaling business without adding personnel. .

Compliance 52

Compliance Technology Marketability 52

Audit Board

JUNE 2, 2022

In our Spotlight on Success series, Brandon Clinefelter, Director of Internal Audit at National Storage Affiliates , shares how his team gained significant time savings on their SOX compliance work. Completing internal control testing reviews in real time, reducing SOX hours by 20% year-over-year. .

Start-ups 52

Start-ups Compliance 52

Audit Board

APRIL 7, 2022

Testing is a critical part of maintaining Sarbanes-Oxley compliance, but managing SOX testing procedures and documentation can quickly become frustrating without good organization and centralized data. Streamline SOX Testing. SOX testing can be cumbersome — but it doesn’t need to be!

Technology 98

Technology Compliance 98

Audit Board

MAY 26, 2023

Quickly getting their SOX program up and running , and gaining efficiencies that have freed up their team for value-added activities around ERM, ESG, and more. Taking advantage of real-time visibility into status to optimize resource planning, achieve ambitious SOX testing goals, and provide robust executive reporting.

Start-ups 52

Start-ups Compliance 52

Audit Board

OCTOBER 16, 2023

The successful deployment of audit analytics can lead to more accurate testing, automation of audit workflow processes, and overall improved audit efficiency. By the numbers: 60% of internal audit teams use data analytics (Chartered IIA & AuditBoard’s Embracing Data Analytics: Ensuring Internal Audit’s Relevance in a Data-Led World ).

Technology 52

Technology Compliance Marketability 52

Audit Board

MAY 12, 2022

While Access Provisioning, Access Deprovisioning, and Change Management are areas of Sarbanes-Oxley (SOX) management testing that get a lot of attention, IT Dependency (ITD) validation for completeness and accuracy is often a misunderstood or a missed area of SOX testing by management. Identify & Classify All ITDs.

Compliance 52

Compliance 52

Audit Board

MARCH 31, 2022

Over the past 20 years, there have been only a couple of other seismic legislative/regulatory events — the Sarbanes-Oxley Act (SOX) in 2002 and, to a lesser extent, the Dodd-Frank Act in 2010 — so greatly impacting internal audit. And, while we’re only at the “proposed rules” stage, U.S. Phase Three: Sustainable Compliance.

Compliance 98

Compliance Technology Marketability 98

Audit Board

OCTOBER 12, 2022

When I first came to Masonite we were spending a lot of time doing our SOX testing, and we were doing that primarily through email and Excel spreadsheets. We have to do SOX testing. It’s our first priority, but there’s value beyond just SOX testing that internal auditors can bring.

Technology 52

Technology Marketability 52

Audit Board

SEPTEMBER 29, 2023

Leaders from Ernst & Young discuss the benefits of automated controls testing, what practical steps to take, and how to use AuditBoard to drive automation. Leaders from Ernst & Young discuss the benefits of automated controls testing, what practical steps to take, and how to use AuditBoard to drive automation.

Start-ups 52

Start-ups Technology 52

Audit Board

SEPTEMBER 20, 2023

With the UK contemplating legislation that would require companies to establish internal control over financial reporting in a SOX-like fashion, the spotlight is back on ICFR and how it can support the preparation and integrity of financial disclosures. ICFR’s importance rose with the Sarbanes-Oxley Act of 2002 in the U.S.,

Compliance 52

Compliance Technology Start-ups Accounting Firms 52

Audit Board

MAY 9, 2022

In our Internal Audit Hyperautomation Blueprint Series , we explore examples of business processes typically selected for SOX and internal audit testing that contain many opportunities for hyperautomation. ICFR Automated Evidence Collection, Testing, and Data Visualization. Discovery Analytics/Data Profiling. Procedures.

Technology 52

Technology Banking 52

Audit Board

MAY 31, 2023

Performing audits and/or establishing a pre-IPO SOX framework significantly increases accountability and transparency within the organization and assures stakeholders and regulators alike that the organization is operating efficiently, compliantly, and ethically.

Start-ups 52

Start-ups Compliance 52

Audit Board

MAY 25, 2022

In our Internal Audit Hyperautomation Blueprint Series , authors Brett Luis and Joe Kim explore examples of business processes typically selected for SOX and internal audit testing that contain many opportunities for hyperautomation. ICFR Automated Evidence Collection, Testing, and Data Visualization Procedures .

Technology 52

Technology Start-ups 52

Audit Board

FEBRUARY 28, 2023

In the years I’ve spent as an Internal Auditor and SOX Compliance Manager with biotech and manufacturing companies, I have found many practical techniques that helped me tremendously. I use standard workpaper markups like Adobe PDF stamps for testing procedures/attributes in fieldwork.

Start-ups 52

Start-ups Technology Compliance Marketability 52

Audit Board

MAY 24, 2023

Overview of the COSO Framework Although the original aim of COSO (the organization) was to investigate and address fraud in the 1970s and 1980s, the COSO framework (the framework) gained increased importance due to the fraud cases of the 1990s and 2000s (Enron, WorldCom, Sunbeam, Tyco) and the subsequent passing of the Sarbanes-Oxley Act (SOX).

Compliance 52

Compliance B2B Technology 52

Audit Board

MARCH 22, 2022

Saved hundreds of hours on the SOX rollover process due to time savings from configurability. . We have several processes within the software such as our SOX testing that has many, many people going into the software to attach documents and leave comments. Streamlined communication and visibility for multiple stakeholders.

Start-ups 52

Start-ups Technology Marketability 52

Audit Board

JULY 11, 2023

Best Practices for ESG Reporting The new era of compliance-driven ESG reporting will have similar outcomes to the effects of SOX on financial reporting. As with other risk management processes, ESG requires controls to be linked to policy. Plan for assurance.

Compliance 52

Compliance Technology Marketability 52

Audit Board

JANUARY 31, 2023

Exploring how AuditBoard’s integration with Snowflake can enable continuous control monitoring, automated testing, and seamless access to data. We’re talking to consultant implementation about continuous control monitoring, continuous testing, automated testing — being able to get data without spending time.”

Compliance 52

Compliance Start-ups Marketability 52

Internal Audit 360

OCTOBER 11, 2022

GUEST BLOG. When I lead my SOX Masters training, we talk about the fact that the attendees’ companies all have processes for hiring, training, performance reviews, and so on—yet none of them would want to rely on them to ensure that every control is performed by competent individuals. What do you think?

Compliance 98

Compliance Marketability 98

Audit Board

APRIL 12, 2023

Over the past years, additional documentation and testing requirements have been brought up regarding IPE (Information Provided by Entity). Watch the full conversation for step-by-step examples, SOC report reliance considerations, IPE configuration testing, and more — and read the can’t-miss highlights below. What Is IPE? What is IPE?

Banking 52

Banking Start-ups Technology 52

Audit Board

AUGUST 9, 2023

While issues management often begins in silos like InfoSec, internal audit, and SOX, a mature issues identification and reporting structure follows a risk-based approach by connecting issues back to the organization’s risks. To accomplish this, it is necessary to establish common and shared elements of issues management across departments.

Compliance 52

Compliance Technology 52

Audit Board

MARCH 22, 2023

Within an IT function alone, there are laws and regulations to follow and standards like NIST, SOC, ISO, SOX, PCI, COBIT, and others that all require simultaneous compliance. Keeping the requirements updated, tested, and monitored is a huge undertaking.

Compliance 52

Compliance Treasury Technology Finance 52

Internal Audit 360

SEPTEMBER 2, 2021

GUEST BLOG POST. It should include testing that the access limits are properly enforced and exceptions investigated. When a SOX key control is involved, additional approvals may be needed. They are considered recommended rather than mandatory guidance for internal auditors. I welcome your thoughts in the comment section below.

Technology 52

Technology 52

Internal Audit 360

OCTOBER 11, 2022

GUEST BLOG. When I lead my SOX Masters training, we talk about the fact that the attendees’ companies all have processes for hiring, training, performance reviews, and so on—yet none of them would want to rely on them to ensure that every control is performed by competent individuals. What do you think?

Compliance 52

Compliance Marketability 52

Audit Board

JULY 14, 2022

In my current role as a Senior Risk Manager in an IT SOX assurance team at Verizon, I am always concerned about staying ahead of emerging risks so we can address anything critical before it becomes a problem. . Now we start the audit with specific risks in scope, and the audit is over when those risks and controls have been adequately tested.

Start-ups 52

Start-ups Specific Risk 52

Audit Board

AUGUST 25, 2022

In the old model, younger auditors and those new to the profession were often expected to “put in their time,” slogging through SOX testing and other repetitive work before earning a more diversified workload. Millennials and Gen Zers in particular seek rewarding work environments that fully leverage their skills.

Technology 98

Technology 98

Audit Board

NOVEMBER 1, 2023

When I used to work in SOX compliance at a large public company, we used a legacy tool. Do hands-on product testing. 72% of risk executives say that implementing digital transformation initiatives is critical to growth. Meet with and outline your use case to vendors. Go through demos from your list of preferred vendors.

Technology 52

Technology Start-ups Compliance 52

Audit Board

SEPTEMBER 28, 2022

Tapping Into Overlooked Markets for Talent and Testing New Work Models. To me, what’s occurring with ESG now may very well follow a path similar to SOX or ERM in past decades. We offered an alternative of some more expertise to come into organizations and help be nimble , addressing those risks as they were occurring.

Technology 98

Technology Compliance Marketability 98

Audit Board

OCTOBER 3, 2022

Choosing a SOX program operating model for your business is not a decision you’ll make only once. That’s why, over time, most businesses will employ a range of SOX operating models. Download the full guide here , and read on below for answers to five common questions asked by companies implementing SOX for the first time. .

Compliance 52

Compliance Start-ups Technology Marketability 52

Audit Board

MAY 9, 2022

Much like Enron or WorldCom scandals, Carillion may prove to be the catalyst for the UK moving forward with its own UK SOX reforms to financial reporting requirements and audit firms. Actions to Take Now for UK SOX Reforms . Thoroughly test the controls for your financially material accounts and systems.

Compliance 98

Compliance Marketability 98

Audit Board

APRIL 4, 2022

In the SOX world, we balance residual risk against the impact and likelihood of a SOX control deficiency. Managing your SOX function requires a modern technology solution. Using strong SOX management software adds visibility into the process that helps you deal with deficiencies as they arise.

Start-ups 98

Start-ups Technology Compliance 98

Audit Board

JUNE 8, 2023

Let’s take the Sarbanes-Oxley (SOX) Act as an example. Section 302 of the SOX Act requires that a CEO and CFO certify that the financial statements are complete and accurate. Depending on the type of compliance audit, an organization might receive an audit opinion, as with SOX and SOC audits. Want to build trust with customers.

Compliance 52

Compliance Start-ups Technology Accounting Firms 52

Audit Board

AUGUST 17, 2023

expected Sarbanes Oxley (SOX) IT general controls)? Testing The testing strategy outlines the complete approach to validating the business process and system before implementation. There are usually four recognized levels of testing that need to be completed before a system is ready to be used.

Start-ups 52

Start-ups Technology Compliance 52

Audit Board

JUNE 21, 2023

All of the testing was done in spreadsheets. They were doing the best they could with the tool set that they had, but unfortunately, those manual processes were fully consuming — there was no additional time beyond just getting the SOX testing done.” All of the documentation that was gathered was done through email.

52

52

Audit Board

JUNE 21, 2023

All of the testing was done in spreadsheets. They were doing the best they could with the tool set that they had, but unfortunately, those manual processes were fully consuming — there was no additional time beyond just getting the SOX testing done.” All of the documentation that was gathered was done through email.

Compliance 52

Compliance 52