← Back to services
Risk & Compliance

Sarbanes-Oxley Section 404

A six-step programme to get and stay compliant with the internal-control requirements of SOX §404.

Under Section 404 of the 2002 Sarbanes-Oxley Act, management must assess the effectiveness of controls over financial reporting — which requires defining and measuring the company-wide control environment.

Establishing an internal-control monitoring process across many business units and systems puts real pressure on company resources and creates anxiety for CEOs and CFOs about possible gaps.

Our six-step approach

  • Planning and scoping — define what will be reviewed and the project approach.
  • Documentation of controls across every significant location and business unit.
  • Assessment of the design and operating effectiveness of controls.
  • Identification and remediation of deficiencies.
  • Management's written report on controls over financial reporting.
  • Preparation for the independent auditor's attestation.

Beyond compliance — the ongoing journey

Reaching compliance is only the start. Clients want assurance that compliance is sustained and that they extract genuine benefit from it — using it as a platform for better information, better decisions and lower risk.

For more information, contact our consulting team.

Book Consultation