For each business unit, create a centralized compliance framework for SOX that includes processes, risks, controls, financial accounts, financial statement assertions, evidence, questionnaires, and tests, along with the associated owners, reviewers, and approvers. Organize this data into appropriate hierarchies and map the relationships between the various data elements.

Plan and schedule risk assessments, define their scope, and assign them to owners. Assess risks based on impact and likelihood, rate control effectiveness, and document the inherent and residual risk rating. Leverage the Risk and Control Matrix for a comprehensive view of the SOX compliance program, including risks, controls, control effectiveness, test results, assertions, and frequency of control testing.

Plan and design control tests, while also defining test owners, schedules, scope, and frequency. Search and select controls for testing and assign them to control owners. Leverage built-in standard templates to conduct the control tests. Store these documents centrally and provide access to them through secure, role-based landing pages.

Create plans, questionnaires, and schedules for certifications based on SOX Section 302 and 404. View a SOX 302 sub-certification report which provides management teams the assurance that subordinate levels have performed their internal control duties.

Accelerate remediation action plans through automated workflows, notifications, and reporting processes. Review issues marked for disclosure and channel them to the disclosure committee for their recommendations and inclusion in regulatory filings. Leverage AI/ML to quickly identify and recommend issues, issue classification, and action plans based on relation.

Monitor the status of control design, process ownership, evaluation plans, test results, and other factors on graphical charts and reports. Drill down to view the data at finer levels of detail. Leverage key control metric cards to track the number and test status of controls.