SOX and Regulatory Compliance
If you are looking to satisfy your SOX and Regulatory compliance requirements in a predictable and cost effective manner then we have solutions that will meet your needs. We have the expertise to get you through any compliance requirement you have including:
Sarbanes Oxley, 8. EU Directive, CFR21 Part 11, GLBA, HIPAA, BASEL II. Our expertise has grown over the last few years and with our AuditProof™ methodology, we can ensure your compliance goals are completely satisfied. We can structure our services and fees to meet any or all of your SOX requirements at a predictable cost to your organization.
Going it alone can be risky!
Project Management
Leadership and management of key dates and resources requirements throughout your Sarbanes-Oxley projects.
Risk Assessment, Scoping & Materiality
Perform a financial statement risk assessment includes identifying the specific financial reporting risks, mapping of the financial statement accounts to the financial statement processes and identifying the specific control objectives associated with the identified risks.
Entity Level Assessment
Compliance with Section 404 requires a top down approach which involves defining the overall control environment.
Process & Controls Documentation
Using the risk assessment, we can help you prepare your documentation of the identified processes and control activities that are in scope and identify the key controls. As part of the key control selection effort, we will focus on ensuring that the scope of the key controls addresses only those processes and activities which cover internal controls over financial reporting and not operational or compliance activities, which are outside the scope of Section 404.
Controls Testing
Test results are designed, executed and documented in line with audit firms requirements.
IT Controls Documentation & Testing
Evaluating IT controls requires highly specialized skills. Although many companies have an Internal Audit capability, many lack the skills in-house to effectively document and test IT controls. Sunera possesses the entire breadth of technical skills required to work with ERPs, databases, networks and websites as well as IT processes.
Remediation
Fixing control design and operating effectiveness gaps often requires changing existing processes and technologies. To do so successfully, a change agent must understand how to gain acceptance by the organization for the change as well as know the many process and technology alternatives to consider. Unlike a typical auditor, our professionals are capable of helping your organization implement new practices and modernize your technologies.
Improving Section 404 Compliance
Today, many companies rely on manual, detective controls that are costly to operate and test and are prone to error. We can help you replace those controls with automated controls that are more reliable and cost-effective. We have the expertise to help you get the most from your existing ERP systems by utilizing functionality already embedded within them.