| « SAP R3 Business BluePrint - Planning Your SAP Implementation | Securing Oracle Ebusiness Suite - Default Passwords for User Accounts » |
Adverse Report on Internal Controls - Things You Should Know
Adverse Report on Internal Controls - Things You Should Know
Companies complying with Section 404 of the Sarbanes Oxley Act are sometimes faced with an adverse report. An adverse report on the internal control structure over financial reporting requires quick resolution on part of the audit committee and senior management. From a perspective of the audit committee and Board of Directors the steps taken to address a adverse report on internal controls should ensure that:
1. The adverse findings in corrected as soon as possible.
2. The market is assured that the corrective action is taken.
Before deciding on the steps to taken to remediate the material weakness, which have resulted in an adverse opinion, the management team, together with the internal auditors, and independent auditors should try an first understand the deficiency. This is important to make a fully informed decision on the future course of action. Here are a few guiding principles or questions, which management should be asking to help tackle an adverse report on internal controls.
- Who identified the weakness?
1) Is it the management as part of its assessment of internal control over financial reporting or otherwise?
2) The internal audit as part of a routine audit, or in connection with the review of internal control?
3) Independent auditors – As part of its review of internal control over financial reporting?
- What is the nature of the weakness?
- How long has the weakness be there?
- What are the implications of the weakness? Is there a possibility that fraud might have resulted from this weakness?
- What other controls are operating in the weakness area that could have acted as compensating controls.
Related Posts
SOX 404 Project Sponsor
Standard Templates for Sarbanes Oxley
Financial Statement Consolidation Using XBRL
ITGC Scoping for SOX 404
1 comment
Webcast with Forrester Research: Controls Automation & Continuous Monitoring
Date: Tuesday, Sept. 26
Time: 1 p.m. EDT/10 a.m. PDT
Duration: 45 minutes ngoing
Sarbanes-Oxley compliance demands controls optimization and continuous monitoring. In the first years of internal control audits, companies labored to satisfy their auditors with manual controls that were costly to implement and then required intensive testing. Forrester Research analyst Paul Hamerman will lead a 45-minute discussion on how companies can take their SOX compliance programs to the next level with controls automation and continuous monitoring. Specifically, Paul will discuss:
* Risk-based controls (and how to implement them)
* Automating compliance processes
* The role of continuous monitoring as a control and control testing
* Business benefits from compliance