财务管理咨询.ppt

* SOX Project Overview A. Document sub- processes B. Document Risks & Controls C. Execute Controls D. Assess Controls E. Assess Risks F. Report & sign-off G. Audit & final sign-off H. Filing to SEC and archive The execution of control activities should be the part of the day to day business activities performed by the relevant personnel. In this step, we perform a gap analysis between the control activities in step B and C. Develop action plan to implement missing control activities 第九十五页，共一百零八页。 * SOX Project Overview A. Document sub- processes B. Document Risks & Controls C. Execute Controls D. Assess Controls E. Assess Risks F. Report & sign-off G. Audit & final sign-off H. Filing to SEC and archive The execution of the control activities needs to be reviewed on a regular basis to ensure that the control activities are effective The assessment should be performed by someone independent of the execution of the control Example: To continue from the previous example, Control assessor: AP manager Assessment instruction: Select 3 items for payment. Trace to supplier invoice, review for evidence of receipt of goods (goods received notes) or services (acknowledgement by recipient). Assessment frequency: Quarterly 第九十六页，共一百零八页。 * SOX Training Agenda 1. Overview of Sarbanes-Oxley Act 2. COSO Internal Control Framework 3. What Could Go Wrong (Risk) 4. Internal Control 5. Typical mistakes in control identification 6. Risk and Control Mapping 7. Identification of Key Control 8. Control Deficiency 9. Walkthrough 10. Test of Control 11. Relationship between Walkthrough and Test of Control 12. SOX Project Overview 13. SOX Documentation and Requirement 第六十三页，共一百零八页。 * Test of control Why do we perform testing of control? What to be tested? How to perform testing of control? 第六十四页，共一百零八页。 * Test of control Management performs tests of controls to determine whether the co