SOX Control Evidence Collection
Hi all — is anyone using Workiva to collect control evidence on an ongoing basis? One of my main challenges in managing the SOX testing program is timely evidence submission from control owners.
I’m considering implementing a process where:
-
Evidence is requested for each control occurrence (monthly/quarterly), and
-
Populations for daily controls are collected monthly to allow for random selection and ongoing testing
The goal would be to monitor control performance continuously and complete testing without time constraints.
Would appreciate any insights or experiences with this approach.
-
We have implementation a solution where monthly control performance tasks/requests are sent to control owners where owners upload the evidence and all such 'requests' are gathered together in a single 'testing phase' on the control test form in Workiva, that allows control testers to select any sample they wish for from the already gathered control performance evidence! There are also handy dashboards that show the status of control performance completion each month. Workiva have since enabled the 'Assessments' experience that can be used for Control Performance tasks.
0
Hi Aleef, I like the idea of a data collection phase. Thank you for sharing. My struggle with the Assessments for collection is managing the documents and having to move them around in the workspace. Are you able to move the support from your collection phase to the actual testing phase without downloading and uploading?
0
Unfortunately it is not possible to do that, as far as I am aware. Still, overall it serves us well.
0
We have some controls where we test several different timeframes and create different PBCs within one testing phase and then test when the support is received. It sounds similar to Afeef's approach. Since PBCs are date/time stamped, you have evidence of when it was provided.
0Iniciar sesión para dejar un comentario.
Comentarios
4 comentarios