This tool highlights questions to consider for implementing and reviewing a process-based self-assessment program within an organization.
Questions to consider include: Does next year’s budget assume a more cost-effective compliance process? Does management have a clear picture of next year’s compliance effort? Has the company implemented a self-assessment process? If the company has a self-assessment process, has it impacted its independent testing requirements? Is the program linked to the priority business processes, specific risks and critical controls identified by your Section 404 compliance process? How do you know it is working effectively?