SOX Compliance Software Lifecycle
The SOX compliance software lifecycle includes the following steps, all automatically enacted by the ProcessGene™ GRC Software Suite:
Compliance software step |
Compliance software activity |
|
SOX context establishment |
- Definition of SOX compliance related business processes
- Delineation of process diagrams (optional)
- Definition of assets within the SOX scope
- Standardization and documentation of SOX regulations, policies and procedures
|
|
Risk identification |
- Risk description, identification of risk stakeholders
- Risk classification and determination of heat-maps
- Risk assessment and measurement
- Determination of Key Risk Indicators (KRIs)
- Risk tolerance determination
|
|
Control determination |
- Definition of controls to mitigate identified SOX risks
- Assignment of SOX control owners
- Scheduling and monitoring SOX control execution
- Assessment of residual risk levels
|
|
Requirement management |
- Requirement definition
- Automated requirement workflow management
- Requirement fulfillment monitoring
|
|
SOX audit and remediation |
- Definition and scheduling of SOX audit plans
- Definition of mechanisms for testing ongoing SOX compliance
- Collection, analysis and storage of SOX audit results
- Remediation plan definition, execution and follow-up
|
|
SOX related incident management |
- Incident recording
- SOX related incident handling (using scheduled workflows)
- SOX related incident analysis and reporting
- Incident monitoring and follow-up
|
|
SOX certification |
- Hierarchal SOX certification process determination
- Establishment of an automated SOX certification process
- Monitoring and reporting SOX certification status
- Archiving SOX certification history
|
|
Multi-Org management |
- Determination of a global SOX compliance baseline with mandatory components
- Establishing a workflow for examining local (subsidiary) variants
- Enforcement of enterprise guidelines, regulations and frameworks within subsidiaries
- Control SOX compliance level both locally (per subsidiary) and globally from a central HQ cockpit
|
|
|
|
The ProcessGene™ SOX Software UsersThe ProcessGene™ SOX compliance software provides value to the following users:
- C-level management (CEO, CFO, CIO, CRO, COO)
- Board of directors
- Compliance officers
- Internal auditors
- SOX compliance managers
Continue to: Related Regulations >
|