Business Controls

• Control Reviews to address management objectives
• Control Framework design and implementation derived via COSO and COBIT
• Integrated Business Process/Business Applications/Technology Infrastructure modeling, mapping, and control identification
• Compliance with Statements on Audit Standards (SAS) 70 for trusted third-party outsourcing and reporting
• Sarbanes Oxley 302 and 404 Compliance
• Material weakness and significant deficiency remediation
• Software Development Lifecycle Controls
• Business Process Documentation
• Controls Testing and Assessment

Oakleaf Group helps our clients identify, develop, and test internal control policies and procedures for business operational processes and information technology environments.  These services are usually delivered as part of projects resulting from organizational changes, new technologies, or outsourcing that require a re-examination of control frameworks. 

Emphasis on business controls has increased since adoption of the Sarbanes-Oxley act.  Sarbanes Oxley section 404 defines management responsibility for establishing and maintaining an adequate internal control structure and procedures for financial reporting.  It requires management to assess and assert to the effectiveness of the internal control structure in the Annual Report through controls documentation and testing.  It requires public company independent auditors to attest to management’s assertion.  Any material weaknesses or significant deficiencies must be disclosed to the audit committee and in management’s report.  Oakleaf Group brings deep expertise implementing business controls that meet SOX requirements in complex financial reporting environments, and integrating SOX 404 compliant controls into ordinary business processes.

In addition, we provide controls services related to information technology initiatives and custom system development projects.   We assist our customers in ensuring that adequate controls documentation is in place alongside custom systems development initiatives, software development lifecycles, and in implementing data quality, data integrity, and system interface controls. 

  Print this page
  Email this page
  Contact us