We’ve designed this guide to help companies train SOX project teams on how to identify and communicate deficiencies noted during the testing process.

According to this sample, an important part of complying with Sarbanes-Oxley (SOX) Section 404 is ensuring that control deficiencies are accurately communicated to appropriate personnel and properly tracked. The risk control specialist (RCS) identifies deficiencies through a process walk-through or testing and communicates the deficiency to the local process owner and local management. Additionally, a deficiency in testing exists when a control is tested and is not operating as designed and documented in the key control description.