Description
This introductory session will introduce cohort members to the Program, and to suggest practices to get the most out of the course. An overview will include the current landscape of SOX compliance, SOX teams, and how current and rising SOX and Internal Audit professionals can improve their careers through documented plans of action and focused intent.
Learning Objectives
Introduction to The SOX Accelerator Program
Current state and pain points of SOX Compliance
Preparing to get the most out of The SOX Accelerator Program
Description
It's been 21 years since the Sarbanes Oxley compliance went in effect, and since then 100,000s of thousands of individuals have been involved helping their organization comply with SOX. However, for many, their SOX experiences have mostly included testing internal controls over financial reporting.
The session will provide a regulatory overview and history of SOX Compliance as a foundation for those who are interested in doing more than just testing controls to help their company’s approach to SOX Compliance. Understand key components of the SEC’s Sarbanes Oxley laws, and the PCAOB’s Auditing Standard #5, and how to use this knowledge when working with your Audit Committee, Senior Finance Leadership, and the External Auditor.
Learning Objectives
Understanding the roles of SEC, PCAOB, and other relevant organizations and how they impact an organization’s management, Audit Committee, the External Auditor, and the Investor
The transition of information from SEC to PCAOB to External Auditor to your Company
Key aspects of SEC regulations and the PCAOB (e.g. AS5)
Resources to keep abreast of regulatory changes that can impact SOX compliance
Description
This facilitated discussion will impress upon key takeaways of the prior week’s session, help attendees internalize key regulatory SOX compliance requirements, and highlight sources of key information to help support important SOX conversations in their organization.
Learning Objectives
Practice communicating the key aspects of the SEC’s Sarbanes Oxley laws and the PCAOB’s Auditing Standard #5
Sharing perspectives on when this knowledge could be useful during the course of a SOX Compliance program year
Understanding the resources available,by the government, external auditors, and other vendors that can help SOX teams keep abreast of relevant changes to SOX Compliance
Description
Do you ever wonder why certain internal controls are in-scope for SOX compliance, or how that determination is made? The focus of this presentation is to provide a step-by-step approach to performing the SOX top-risk assessment, and to share perspectives on areas that are most common for controls rationalization.
Learning Objectives
“How to” perform a SOX Risk Assessment to ensure that only the right key controls are performed and tested
Scoping considerations for multiple in-scope entities (full vs. limited scope)
Most common areas to reduce and rationalize controls
Entity-level controls considerations
Factors involved with Fraud and other risk assessments
Description
This session will teach and train cohort members how to take more ownership and control of what controls their organization should, and shouldn’t, be testing for their SOX compliance program. The meeting will discuss key takeaways from the prior week’s session on performing the top-down risk assessment and how to rationalize SOX controls.
Learning Objectives
Walkthrough steps needed to determine what controls should be key for SOX compliance
Identify common areas and processes where too many controls exist
Practice supporting why controls were eliminated for External Auditor buy-in
Description
This session is designed to provide non IT SOX auditors with a deeper understanding of managing IT SOX through discussion of IT SOX and Application control frameworks, how to determine what ITGCs are needed, and when and how to harmonize IT controls to reduce testing.
Learning Objectives
Defining and understanding IT SOX landscape
Scoping and rationalizing systems and IT general and application controls
ITGC testing best practices and considerations
Description
This focus of this facilitated discussion is to dive deeper into the prior week’s talking points and share perspectives on contemporary approaches to managing an IT controls environment. Discussion points will include the impact of changes to an organization’s tech stack on ITGCs, external technology changes impacts, and root causes to why IT Controls are deficient.
Learning Objectives
Common ITGC focus areas of external auditors
How to leverage scoping templates to ensure your control environment is right-sized for your organization
ITGC and application controls most prone to being deficient
Description
This session will discuss the how-to’s and best practices of control testing for SOX compliance, including documenting walkthroughs, performing observation, inspection, re-performance testing, documenting and assessing issues, and documenting end-user computing (EUC) or information prepared by entity (IPE) controls.
Learning Objectives
Understanding control testing techniques and levels of assurance
Managing IPEs to appease external auditor requests
Managing, assessing, and remediating control deficiencies
Reporting control testing results and issues
Description
Cohort members will have the opportunity to explore ways and share techniques to reduce time spent testing controls, determine type of information to be captured when control observations are identified, and ways their peers are sharing control testing and issue information with their team, management, the Board, and their External Auditor.
Additionally, cohort members will share best practices on appeasing external auditor requests involving documentation supporting Information prepared by entities (IPEs) and end-user computing controls.
Learning Objectives
Learning about shortcuts and best practices to leverage when testing internal controls
Data points to capture and report on when documenting observations and issues
Practicing talking points when discussing IPEs with control owners and external auditors
Description
The use of technology for SOX compliance has increased exponentially in a matter of years. The session will highlight the advancements in the technology applications used for SOX compliance - including applications to centralize your SOX program, considerations on when and where to use data analytics, and how to use Generative AI to continue to minimize and eliminate time spent on non-value added activities in your SOX program.
Learning Objectives
How to better use a purpose-built application for SOX compliance
Current and future Gen AI use cases
Setting and successfully rolling out a SOX data analytics program
Examples of analytics for more efficient sample selection and controls testing
Automating SOX tasks and controls (data collection, control performance)
Description
Many internal audit and internal controls teams spend a significant amount of money on technology for their SOX program, but have barely scratched the surface on recognizing value and an ROI for their spend. This session will solicit and share feedback on the applications, features, and use cases best used to drive efficiencies in your SOX program.
Learning Objectives
GRC features to use to improve the control owner’s working experience
What processes and controls best leverage data analytic capabilities
Hearing of recent and new Generative AI use cases for SOX compliance
Understanding what parties outside of the SOX team need to be involved to leverage technology to its fullest capacity
Description
Being a great auditor and audit leader is one part of the puzzle. The other? Navigating the corporate environment in a way that best positions you for future opportunities and growth. Learn to get out of your own way and start seeing the recognition and progression you deserve with these secrets of the career game.
Learning Objectives
Establishing executive presence and improving executive communications
Building your personal brand
Ways to navigate the corporate bureaucracy of a public company
Description
There is a reason why many prominent business leaders, including those leading SOX functions, may not be the most technically savvy or proficient. It’s because they’ve mastered the art of working with people, establishing a great personal brand, and developing a reputation as a future business leader. This session will explore best practices successfully used to uplevel your reputation as a leader in your organization, and role-play situations where leadership may be most needed in your SOX program.
Learning Objectives
Techniques to build your personal brand as a SOX Leader and your business reputation as a trusted risk advisor
Identity situations where changes in communication style are most warranted
Strategies to leverage to improve the chances of getting what you need to uplevel your SOX program and career
Description
Listen and participate in a 1:1 interview with a former external audit partner and current Audit Committee chair for actual perspectives and insights on how the SOX team, and its leader, can better partner with their external auditor and serve their Audit Committee.
Learning Objectives
External auditor and Audit Committee expectations of a SOX team and leader
Considerations when meeting Audit Committee during AC meetings, prep meetings, and the Executive Session
“What Good Looks Like” - the partnership of Internal Audit, External Audit, the CFO, and Audit Committee
Description
The most important part of a SOX program’s success is not how fast they test controls, or how few ICFR they have. It’s the SOX Leader’s ability to manage key relationships and to use the SOX program to elevate their organization’s approach to enterprise risk management. This session will share best practices on working with external auditors, senior leaders, SOX customers, and discuss strategies to drive positive change in your business.
Learning Objectives
The SOX Leader’s relationship with the External Auditor
Direct and indirect reliance strategies to ease the external auditor’s work
Educating and advocating to improve the the culture of controls compliance
Using SOX as a foundation for internal audit and risk management success
Description
This final session of the SOX Accelerator Program will build upon strategies shared in the prior week’s session and identify additional practices to transition your SOX Program from mediocre to world-class by implementing training programs for control owners, being seen as an advocate for SOX Compliance in your organization, and ways to expand upon your SOX responsibilities to other needed risk efforts.
Learning Objectives
Share best practices partnering with your External Auditor
Learn how to improve the experience of performing controls for control owners
Explore opportunities to expand SOX work to lead your organization’s Connected Risk Strategy and approach
Make the most out of lessons learned in the SOX Accelerator Program
Includes copies of meeting presentations, optional and recommended pre-readings, cohort discussion talking points, and additional resources to help uplevel your SOX knowledge and career.
An online, managed Slack community for all cohort members to continue to build relationships and network, and to share best practices and templates on SOX compliance, Internal Audit, and other risk management initiatives with others who are part of the broader IAC community.
You’ve never received formal training on the technical aspects of SOX compliance
You understand that this program is an asset and a tool, and you’ll need to use it
You are open and flexible to new ideas, and that there is not one “right” or “wrong” approach to managing a SOX program
You recognize that a large part of success involves not only your strategies, but having a network of like-minded individuals to share perspective with and learn from
You’re willing to reach out and get the help you need when you get stuck
You are not respectful, or quickly dismissive of new ideas or perspectives of your peers
You are looking to only learn, and not share your thoughts and converse with your peers when opportunities arise to do so
You are just looking to get CPEs
You are expecting The SOX Accelerator Program to be technical manual to test and document controls or how to use GRC applications
16 NASBA-accredited CPEs
1-year membership to the Internal Audit Collective community
9 expert-led presentations
7 peer roundtable conversations
Syllabus with all shared presentations and templates
Who is this course for?
The SOX Accelerator Program was built for:
The program content is as useful to pre-IPO SOX leaders as it is to those leading SOX efforts of the Fortune 100.
And while this program is focused on SOX Compliance, current or future Internal Control leaders of other functions (e.g. Model Audit Rule) will find that 90%+ of the course content relevant to them as well.
Who are you? And what is the Internal Audit Collective?
Hi - I’m Tom O’Reilly. I help internal audit and SOX professionals uplevel their programs and careers.You can read more about my backstory and why I built the Internal Audit Collective here.
And while this program is focused on SOX Compliance, current or future Internal Control leaders of other functions (e.g. Model Audit Rule) will find that 90%+ of the course content relevant to them as well.
What if I cannot attend all of the meetings?
You will receive CPE credits for all sessions that you attend.
You will receive a certificate of completion for participating in 80% of the meetings (13 total)
I don’t lead my SOX department - am I allowed to register?
Yes, attendance is open to anyone who is interested in upleveling their companies approach to SOX compliance.
Those that will likely benefit from the sessions the most will likely have at least four years of SOX experience.
OK - I’m sold. What happens after I pay for the course?
Once you are registered, you will receive a welcome email, which will include the program syllabus with meeting information and materials.
You will be asked to choose what breakout sessions you’d like to attend (7 total). You’ll then receive meeting invites.
What do I do if I have any additional questions?
Email me at: tom@InternalAuditCollective.com - and I’ll get back to you asap.