
Description
This introductory session will introduce cohort members to the Program, and to suggest practices to get the most out of the course. An overview will include the current landscape of SOX compliance, SOX teams, and how current and rising SOX and Internal Audit professionals can improve their careers through documented plans of action and focused intent.
Learning Objectives
Introduction to The SOX Accelerator Program
Current state and pain points of SOX Compliance
Preparing to get the most out of The SOX Accelerator Program
Description
Do you ever wonder why certain internal controls are in-scope for SOX compliance, or how that determination is made? The focus of this presentation is to provide a step-by-step approach to performing the SOX top-risk assessment, and to share perspectives on areas that are most common for controls rationalization.
Learning Objectives
“How to” perform a SOX Risk Assessment to ensure that only the right key controls are performed and tested
Scoping considerations for multiple in-scope entities (full vs. limited scope)
Most common areas to reduce and rationalize controls
Entity-level controls considerations
Factors involved with Fraud and other risk assessments
Description
This session will teach and train cohort members how to take more ownership and control of what controls their organization should, and shouldn’t, be testing for their SOX compliance program. The meeting will discuss key takeaways from the prior week’s session on performing the top-down risk assessment and how to rationalize SOX controls.
Learning Objectives
Walkthrough steps needed to determine what controls should be key for SOX compliance
Identify common areas and processes where too many controls exist
Practice supporting why controls were eliminated for External Auditor buy-in
Description
This session is designed to provide non IT SOX auditors with a deeper understanding of managing IT SOX through discussion of IT SOX and Application control frameworks, how to determine what ITGCs are needed, and when and how to harmonize IT controls to reduce testing.
Learning Objectives
Defining and understanding IT SOX landscape
Scoping and rationalizing systems and IT general and application controls
ITGC testing best practices and considerations
Description
This focus of this facilitated discussion is to dive deeper into the prior week’s talking points and share perspectives on contemporary approaches to managing an IT controls environment. Discussion points will include the impact of changes to an organization’s tech stack on ITGCs, external technology changes impacts, and root causes to why IT Controls are deficient.
Learning Objectives
Common ITGC focus areas of external auditors
How to leverage scoping templates to ensure your control environment is right-sized for your organization
ITGC and application controls most prone to being deficient
Description
Information Used in a Control (IUC) is a foundational element of effective control design, particularly for management review and automated controls relied upon by Internal Audit and external auditors. This session focuses on leading practices CAEs and Audit Directors need to understand to ensure IUC is reliable, well-governed, and scalable. Participants will explore key IUC risk considerations, auditor expectations, and how a risk-based approach to testing, benchmarking, and technology can reduce friction while maintaining control quality.
Learning Objectives
Articulate what CAEs and Audit Directors need to know about IUC and its role in control effectiveness
Identify leading practices for governing and standardizing IUC across the organization
Identify leading practices for governing and standardizing IUC across the organization
Describe auditor expectations and documentation standards for IUC
Apply a risk-based approach to benchmarking, testing, and leveraging technology for IUC
Description
This facilitated discussion will give Cohort members the opportunity to share key takeaways from the prior week’s session and deepen the understanding of IUC and explore challenges in standardizing IUC practices, addressing data integrity risks, and leveraging technology where applicable.
Learning Objectives
Understand how to evaluate the maturity of your organization’s IUC practices.
Identify strategies to align management’s IUC practices with internal and external audit testing expectations.
Identify potential technology-based solutions to improve IUC quality and control effectiveness
Description
This session explores the strategic drivers of auditor reliance, including the importance of objectivity, competency, and rigorous methodology. It outlines practical strategies for alignment, such as performing joint walkthroughs and leveraging shared sample sets to reduce the burden on control owners. Furthermore, the presentation offers a roadmap for effective communication, conflict resolution, and long-term relationship management to ensure a smooth, "no surprises" audit cycle.
Learning Objectives
Develop a Reliance Strategy for SOX Testing: Identify the key factors that drive EA reliance—such as independence and documentation standards—and apply strategies to align on scope, timing, and methodology early in the audit cycle.
Evaluate and Select High-Value Controls for Reliance: Categorize which controls are best suited for EA reliance (e.g., simple, repeatable, low-judgment manual controls) versus those that are not, in order to maximize cost savings and team efficiency.
Implement Effective Communication and Conflict Management Protocols: Execute a "no surprises" communication plan that engages senior leadership and uses specific "Do/Don't" techniques to resolve professional disagreements with the EA without damaging the partnership.
Description
This facilitated discussion will give Cohort members the opportunity to share key takeaways from the prior week’s session and explore practical methods to improve relationships and reliance with external auditors.
Additionally, Cohort members will share best practices on addressing barriers to collaboration, identifying leading practices for effective relationships, and improving overall efficiency of SOX program management.
Learning Objectives
Understand how to apply audit reliance strategy concepts to identify where increasing external audit reliance can be most impactful
Evaluate common collaboration challenges between internal and external auditors and develop approaches to overcome them through proactive communication and alignment.
Identify specific action items to strengthen external audit reliance during the planning, documentation, and testing phases of the SOX program.
Description
The use of technology for SOX compliance has increased exponentially in a matter of years. The session will highlight the advancements in the technology applications used for SOX compliance - including applications to centralize your SOX program, considerations on when and where to use data analytics, and how to use Generative AI to continue to minimize and eliminate time spent on non-value added activities in your SOX program.
Learning Objectives
How to better use a purpose-built application for SOX compliance
Current and future Gen AI use cases
Setting and successfully rolling out a SOX data analytics program
Examples of analytics for more efficient sample selection and controls testing
Automating SOX tasks and controls (data collection, control performance)
Description
Many internal audit and internal controls teams spend a significant amount of money on technology for their SOX program, but have barely scratched the surface on recognizing value and an ROI for their spend. This session will solicit and share feedback on the applications, features, and use cases best used to drive efficiencies in your SOX program.
Learning Objectives
GRC features to use to improve the control owner’s working experience
What processes and controls best leverage data analytic capabilities
Hearing of recent and new Generative AI use cases for SOX compliance
Understanding what parties outside of the SOX team need to be involved to leverage technology to its fullest capacity
Description
Being a great auditor and audit leader is one part of the puzzle. The other? Navigating the corporate environment in a way that best positions you for future opportunities and growth. Learn to get out of your own way and start seeing the recognition and progression you deserve with these secrets of the career game.
Learning Objectives
Establishing executive presence and improving executive communications
Building your personal brand
Ways to navigate the corporate bureaucracy of a public company
Description
There is a reason why many prominent business leaders, including those leading SOX functions, may not be the most technically savvy or proficient. It’s because they’ve mastered the art of working with people, establishing a great personal brand, and developing a reputation as a future business leader. This session will explore best practices successfully used to uplevel your reputation as a leader in your organization, and role-play situations where leadership may be most needed in your SOX program.
Learning Objectives
Techniques to build your personal brand as a SOX Leader and your business reputation as a trusted risk advisor
Identity situations where changes in communication style are most warranted
Strategies to leverage to improve the chances of getting what you need to uplevel your SOX program and career
Description
Listen and participate in a 1:1 interview with a former external audit partner and current Audit Committee chair for actual perspectives and insights on how the SOX team, and its leader, can better partner with their external auditor and serve their Audit Committee.
Learning Objectives
External auditor and Audit Committee expectations of a SOX team and leader
Considerations when meeting Audit Committee during AC meetings, prep meetings, and the Executive Session
“What Good Looks Like” - the partnership of Internal Audit, External Audit, the CFO, and Audit Committee
Description
The most important part of a SOX program’s success is not how fast they test controls, or how few ICFR they have. It’s the SOX Leader’s ability to manage key relationships and to use the SOX program to elevate their organization’s approach to enterprise risk management. This session will share best practices on working with external auditors, senior leaders, SOX customers, and discuss strategies to drive positive change in your business.
Learning Objectives
The SOX Leader’s relationship with the External Auditor
Direct and indirect reliance strategies to ease the external auditor’s work
Educating and advocating to improve the the culture of controls compliance
Using SOX as a foundation for internal audit and risk management success
Description
This final session of the SOX Accelerator Program will build upon strategies shared in the prior week’s session and identify additional practices to transition your SOX Program from mediocre to world-class by implementing training programs for control owners, being seen as an advocate for SOX Compliance in your organization, and ways to expand upon your SOX responsibilities to other needed risk efforts.
Learning Objectives
Share best practices partnering with your External Auditor
Learn how to improve the experience of performing controls for control owners
Explore opportunities to expand SOX work to lead your organization’s Connected Risk Strategy and approach
Make the most out of lessons learned in the SOX Accelerator Program
Includes copies of meeting presentations, optional and recommended pre-readings, cohort discussion talking points, and additional resources to help uplevel your SOX knowledge and career.
An online, managed Slack community for all cohort members to continue to build relationships and network, and to share best practices and templates on SOX compliance, Internal Audit, and other risk management initiatives with others who are part of the broader IAC community.
You’ve never received formal training on the technical aspects of SOX compliance
You understand that this program is an asset and a tool, and you’ll need to use it
You are open and flexible to new ideas, and that there is not one “right” or “wrong” approach to managing a SOX program
You recognize that a large part of success involves not only your strategies, but having a network of like-minded individuals to share perspective with and learn from
You’re willing to reach out and get the help you need when you get stuck
You are not respectful, or quickly dismissive of new ideas or perspectives of your peers
You are looking to only learn, and not share your thoughts and converse with your peers when opportunities arise to do so
You are just looking to get CPEs
You are expecting The SOX Accelerator Program to be technical manual to test and document controls or how to use GRC applications

16 NASBA-accredited CPEs
1-year membership to the Internal Audit Collective community
9 expert-led presentations
7 peer roundtable conversations
Syllabus with all shared presentations and templates
Who is this course for?
The SOX Accelerator Program was built for:
The program content is as useful to pre-IPO SOX leaders as it is to those leading SOX efforts of the Fortune 100.
And while this program is focused on SOX Compliance, current or future Internal Control leaders of other functions (e.g. Model Audit Rule) will find that 90%+ of the course content relevant to them as well.
Who are you? And what is the Internal Audit Collective?
Hi - I’m Tom O’Reilly. I help internal audit and SOX professionals uplevel their programs and careers.You can read more about my backstory and why I built the Internal Audit Collective here.
And while this program is focused on SOX Compliance, current or future Internal Control leaders of other functions (e.g. Model Audit Rule) will find that 90%+ of the course content relevant to them as well.
What if I cannot attend all of the meetings?
You will receive CPE credits for all sessions that you attend.
You will receive a certificate of completion for participating in 80% of the meetings (13 total)
I don’t lead my SOX department - am I allowed to register?
Yes, attendance is open to anyone who is interested in upleveling their companies approach to SOX compliance.
Those that will likely benefit from the sessions the most will likely have at least four years of SOX experience.
OK - I’m sold. What happens after I pay for the course?
Once you are registered, you will receive a welcome email, which will include the program syllabus with meeting information and materials.
You will be asked to choose what breakout sessions you’d like to attend (7 total). You’ll then receive meeting invites.
What do I do if I have any additional questions?
Email me at: tom@InternalAuditCollective.com - and I’ll get back to you asap.