SOX / ICFR Programme

A SOX programme gives management (and, for larger filers, the external auditor) a defensible basis to assert on internal control over financial reporting. This template structures ICFR around the COSO Internal Control framework — control environment, risk assessment, control activities, information and communication, monitoring — scopes significant accounts and processes, documents and tests control design and operating effectiveness, and remediates deficiencies.