SOX Section 404 requires companies to evaluate the internal controls over financial reporting. This document outlines a process for management to use in determining the final process criticality, a primary factor in setting the scope of the controls assessment. This process includes prioritizing financial reporting elements, defining processes, linking processes to financial elements, and prioritizing processes.