This questionnaire serves as a guide in determining the severity of deficiencies cited during the internal control testing process.
These principles should be used as a guide to determine the severity of any deficiencies cited during the control testing process. The results of this process should be used to complete the
SOX Control Deficiency Assessment Form. The deficiency assessment should be completed using this information and other information provided by management in reaching its decision.
Deficiencies rated as inconsequential will be reviewed by the PMO for reasonableness based on the information provided on the
SOX Control Deficiency Assessment Form. Deficiencies or material weaknesses identified by management as potentially significant will undergo a separate review process by the PMO and management to determine how these deficiencies should be categorized.