Step 1 of 7: Identity
Sarbanes-Oxley (SOX)
Program scope & control inventory CoreSetting up or re-scoping the ICFR program for a fiscal year.
The "SOX ICFR Scope" workflow has 7 steps, in this order: Step 1 Identity, Step 2 Materiality, Step 3 Scope, Step 4 Exclusions, Step 5 Changes, Step 6 Framework, Step 7 Audit. Steps must be completed in order; each unlocks the next.
Sarbanes-Oxley Act Sections 302/404/906; PCAOB AS 2201; COSO 2013
7 steps, completed in order. Each step is validated against the schema before the next unlocks.
Step 1 of 7
ScreenSarbanes-Oxley (SOX)step 1
Complete the Identity fields. Each value is validated against the schema before the next step unlocks.
Domain entity ID (required)
entityIdThe organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.
Fiscal year (required)
fiscalYearEnter fiscal year.
Step 2 of 7
ScreenSarbanes-Oxley (SOX)step 2
Complete the Materiality fields. Each value is validated against the schema before the next step unlocks.
Overall materiality (minor units) (required)
overallMaterialityMinorEnter overall materiality (minor units).
Performance materiality (minor units) (required)
performanceMaterialityMinorEnter performance materiality (minor units).
Clearly trivial threshold (minor units) (required)
clearlyTrivialMinorEnter clearly trivial threshold (minor units).
Basis (required)
materialityBasisBenchmark, percentage applied, and why that benchmark. Management judgement — the platform structures it and does not make it.
Figure being setoptional
materialityTypeEnter figure being set.
Step 3 of 7
ScreenSarbanes-Oxley (SOX)step 3
Complete the Scope fields. Each value is validated against the schema before the next step unlocks.
Scope dimension (required)
scopeDimensionEnter scope dimension.
Why in scope (required)
inclusionBasis"Inherited" is nameable so it can be QUERIED FOR — an account in scope because it was last year has no rationale.
Qualitative factoroptional
qualitativeReasonRequired where inclusion rests on judgement rather than a threshold.
Relevant assertions (required)
assertionsRelevantCoverage is a statement about assertions. An account with none cannot have its coverage evaluated.
Step 4 of 7
ScreenSarbanes-Oxley (SOX)step 4
Complete the Exclusions fields. Each value is validated against the schema before the next step unlocks.
Excluded coverage (%) (required)
excludedCoveragePercentExclusions that are individually immaterial and collectively material are a known failure. The aggregate must be visible.
Exclusion reasonoptional
exclusionReasonEnter exclusion reason.
Step 5 of 7
ScreenSarbanes-Oxley (SOX)step 5
Complete the Changes fields. Each value is validated against the schema before the next step unlocks.
Scope-changing eventsoptional
scopeChangeEventsEach OPENS an obligation to re-evaluate rather than closing one.
Step 6 of 7
ScreenSarbanes-Oxley (SOX)step 6
Complete the Framework fields. Each value is validated against the schema before the next step unlocks.
ICFR framework (required)
icfrFrameworkAn assessment against no named framework is not an assessment.
Step 7 of 7
ScreenSarbanes-Oxley (SOX)step 7
No manual input is captured here: this step is completed from the preceding sections or by the platform.
No manual inputs in this step.
Continue with the next guide in this framework's table of contents.
The "Internal Controls" workflow has 7 steps, in this order: Step 1 Identity, Step 2 Hierarchy, Step 3 Design, Step 4 IT Dependency, Step 5 Design Period, Step 6 Assertions, Step 7 Audit. Steps must be completed in order; each unlocks the next.
Read guide Program scope & control inventoryThe "SOX ITGC Scope" workflow has 7 steps, in this order: Step 1 Identity, Step 2 Scope, Step 3 Dependency, Step 4 Cyber, Step 5 Determination, Step 6 Access, Step 7 Audit. Steps must be completed in order; each unlocks the next.
Read guide Program scope & control inventoryThe "SOX Multi-Entity Operations" workflow has 7 steps, in this order: Step 1 Identity, Step 2 Shared Service, Step 3 Standardisation, Step 4 Coverage, Step 5 Consolidation, Step 6 Obligations, Step 7 Audit. Steps must be completed in order; each unlocks the next.
Read guide