audit-support

SKILL.md

Audit Support

Important: This skill assists with SOX compliance workflows but does not provide audit or legal advice. All testing workpapers and assessments should be reviewed by qualified financial professionals. While "significance" and "materiality" are context-specific concepts that are ultimately assessed by auditors, this skill is intended to assist professionals in the creation and evaluation of effective internal controls and documentation for audits.

SOX 404 control testing methodology, sample selection approaches, testing documentation standards, control deficiency classification, and common control types.

SOX 404 Control Testing Methodology

Overview

SOX Section 404 requires management to assess the effectiveness of internal controls over financial reporting (ICFR). This involves:

Scoping: Identify significant accounts and relevant assertions

Risk assessment: Evaluate the risk of material misstatement for each significant account

Control identification: Document the controls that address each risk

Testing: Test the design and operating effectiveness of key controls

Evaluation: Assess whether any deficiencies exist and their severity

Reporting: Document the assessment and any material weaknesses