HomeSearchSitemap
Sarbanes-Oxley Compliance Services

Many companies are looking to reduce SOX compliance costs and effort. In-house capability development is one part of the strategy, but not the only solution. With changes in business environment and growing knowledge and awareness, SOX compliance has evolved steadily and presents many challenges. We help your internal departments through the peak periods of testing, giving you access to more bandwidth. Our approach incorporates low-cost qualified and effective SOX testing resources to reduce overall SOX compliance costs.

Process & Controls Documentation

We can help you prepare your Section 404 business process documentation and identify key controls to focus on. Our standardized approach produces just the optimal amount of documentation for your management assessment and your external auditors. Our multidisciplinary teams ensure the documentation addresses all of the essential elements, such as company-wide, IT and financial disclosure controls. Our Big-4 experience keeps the project focused on what is really required by Section 404 and provides you with suitable integration to your external auditors.

IT Controls Documentation & Testing

Specialized skills and professional judgment are required to assess IT controls in a company. Although many public companies have an Internal Audit capability, some lack the skills in-house to effectively document and test IT controls. Spry Control possesses the entire breadth of technical skills required to work with ERPs, databases, networks and websites as well as IT processes. Our professionals are experts in COBIT for Sarbanes-Oxley and most have completed many IT general controls and application controls programs. Information Technology controls and system security are our core specialties.

Controls Testing

Our control experts are well trained in testing techniques and documentation standards. We provide testing results that meet the requirements of the public accounting firms without the high cost. We believe that control testing is repetitive and can be performed more efficiently with resources that have the appropriate and multi-disciplinary skills and training for them to see the bigger picture and gain a sharper focus on control issues. The strength of one control may overcome the weakness in some of the controls rather than working on expensive and unnecessary solutions.

Controls Remediation

Fixing control design and operating effectiveness gaps often requires changing existing processes and technologies. To do so successfully, the specialist must understand how to gain acceptance by the organization for the change, as well as know the many process and technology alternatives to consider. Compared to a typical auditor, our professionals are capable of helping your organization implement new practices and modernize your technologies with cost effective solutions.

Improving Section 404 Compliance

Today, many companies rely on manual, detective controls that are costly to operate and test, and are prone to error or poor judgment. We can help you replace those controls with automated controls that, if used correctly, are more reliable and cost-effective. We have the expertise to help you get the most from your existing ERP systems by utilizing functionality already available. In addition, we can deploy emerging controls automation software, such as approval, or controls monitoring/self-assessment programs to make controls testing and monitoring more efficient.