CSOX Compliance Lifecycle
The CSOX compliance lifecycle includes the following steps, all automatically enacted by the ProcessGene™ GRC Software Suite:
Lifecycle step |
CSOX activity |
|
CSOX context establishment |
- Definition of CSOX compliance related business processes
- Delineation of process diagrams (optional)
- Definition of assets within the CSOX scope
- Standardization and documentation of CSOX regulations, policies and procedures
|
|
Risk identification |
- Risk description, identification of risk stakeholders
- Risk classification and determination of heat-maps
- Risk assessment and measurement
- Determination of Key Risk Indicators (KRIs)
- Risk tolerance determination
|
|
Control determination |
- Definition of controls to mitigate identified CSOX risks
- Assignment of CSOX control owners
- Scheduling and monitoring CSOX control execution
- Assessment of residual risk levels
|
|
Requirement management |
- Requirement definition
- Automated requirement workflow management
- Requirement fulfillment monitoring
|
|
CSOX audit and remediation |
- Definition and scheduling of CSOX audit plans
- Definition of mechanisms for testing ongoing CSOX compliance
- Collection, analysis and storage of CSOX audit results
- Remediation plan definition, execution and follow-up
|
|
CSOX related incident management |
- Incident recording
- CSOX related incident handling (using scheduled workflows)
- CSOX related incident analysis and reporting
- Incident monitoring and follow-up
|
|
CSOX certification |
- Hierarchal CSOX certification process determination
- Establishment of an automated CSOX certification process
- Monitoring and reporting CSOX certification status
- Archiving CSOX certification history
|
|
Multi-Org management |
- Determination of a global CSOX compliance baseline with mandatory components
- Establishing a workflow for examining local (subsidiary) variants
- Enforcement of enterprise guidelines, regulations and frameworks within subsidiaries
- Control CSOX compliance level both locally (per subsidiary) and globally from a central HQ cockpit
|
|
|
|
The ProcessGene™ CSOX Software UsersThe ProcessGene™ CSOX compliance software provides value to the following users:
- C-level management (CEO, CFO, CIO, CRO, COO)
- Board of directors
- Compliance officers
- Internal auditors
- CSOX compliance managers
Continue to: Related Regulations >
|