Annually, we perform a self assessment of SOX controls and provide an assessment at the component level to our external auditors. We follow the 2013 COSO guidance, but I feel that this process is not only time intensive and very manual, but flawed as it does not clearly articulate control deficiencies identified. I am looking for reporting ideas or methods that allow for value driven data to speak to our internal control environment that can be shared with our external auditors, audit committee and management.