This Sarbanes-Oxley Program Implementation Guide is designed to help organizations confidently manage change without putting internal control over financial reporting at risk. The tool provides a structured, practical approach for identifying, evaluating and documenting changes that affect SOX scope, processes and controls. It also walks process owners, Internal Audit and the SOX office through clear responsibilities, quarterly expectations and standardized workflows using SOX software. 

From change identification to checklist completion and design effectiveness updates, this guide helps ensure that control modifications are reviewed consistently, documented thoroughly, and addressed before issues escalate into compliance gaps. At its core, this tool transforms SOX change management from a reactive exercise into a repeatable, well-governed process. Key topics in this guide include:

• Changes to controls will be reviewed by the SOX office, Internal Audit and corporate, as part of the quarterly review process.
• Flag all controls in the SOX software that have changed as of the last day of the quarter.
• Checklists must be completed by the last business day of the quarter.