European SOX Compliance Lifecycle
The European SOX compliance lifecycle includes the following steps, all automatically enacted by the ProcessGene™ GRC Software Suite:
Lifecycle step |
European SOX activity |
|
European SOX context establishment |
- Definition of European SOX compliance related business processes
- Delineation of process diagrams (optional)
- Definition of assets within the European SOX scope
- Standardization and documentation of European SOX regulations, policies and procedures
|
|
Risk identification |
- Risk description, identification of risk stakeholders
- Risk classification and determination of heat-maps
- Risk assessment and measurement
- Determination of Key Risk Indicators (KRIs)
- Risk tolerance determination
|
|
Control determination |
- Definition of controls to mitigate identified European SOX risks
- Assignment of European SOX control owners
- Scheduling and monitoring European SOX control execution
- Assessment of residual risk levels
|
|
Requirement management |
- Requirement definition
- Automated requirement workflow management
- Requirement fulfillment monitoring
|
|
European SOX audit and remediation |
- Definition and scheduling of European SOX audit plans
- Definition of mechanisms for testing ongoing European SOX compliance
- Collection, analysis and storage of European SOX audit results
- Remediation plan definition, execution and follow-up
|
|
European SOX related incident management |
- Incident recording
- European SOX related incident handling (using scheduled workflows)
- European SOX related incident analysis and reporting
- Incident monitoring and follow-up
|
|
European SOX certification |
- Hierarchal European SOX certification process determination
- Establishment of an automated European SOX certification process
- Monitoring and reporting European SOX certification status
- Archiving European SOX certification history
|
|
Multi-Org management |
- Determination of a global European SOX compliance baseline with mandatory components
- Establishing a workflow for examining local (subsidiary) variants
- Enforcement of enterprise guidelines, regulations and frameworks within subsidiaries
- Control European SOX compliance level both locally (per subsidiary) and globally from a central HQ cockpit
|
|
|
|
The ProcessGene™ European SOX Software UsersThe ProcessGene™ European SOX compliance software provides value to the following users:
- C-level management (CEO, CFO, CIO, CRO, COO)
- Board of directors
- Compliance officers
- Internal auditors
- European SOX compliance managers
Continue to: Related Regulations >
|