Please answer these simple 10 questions.

This survey will help determine if your security and governance would improve with YouAttest.

Does your organization have automated processes to ensure only authorized personnel access financial reporting systems? SOX Standard COSO Control Environment 1

Yes

Commitment to Integrity and Ethical Values: The organization demonstrates a commitment to integrity and ethical values, ensuring financial reporting systems are protected from unauthorized access or manipulation.

Are roles and responsibilities for financial system access clearly defined and periodically reviewed? SOX Standard COSO Control Environment 3

Yes

Establishment of Structures, Reporting Lines, and Authorities: The organization establishes structures, reporting lines, and appropriate authorities and responsibilities for financial reporting.

Does your organization have tools to identify and analyze identity-related risks, such as over-privileged accounts, in financial systems? SOX Standard COSO Risk Assessment 6

Yes

Identify and Analyze Risks: The organization identifies risks to the achievement of financial reporting objectives, including IT-related risks like unauthorized access.

Are IT general controls (ITGCs), such as access control and segregation of duties, automated to mitigate risks to financial reporting? SOX Standard COSO Control Activities 10

Yes

Select and Develop Control Activities: The organization selects and develops control activities, including IT general controls (ITGCs), to mitigate risks to financial reporting.

Does your organization have automated processes to monitor and review changes to financial system access rights? SOX Standard COSO Control Activities 11

Yes

Select and Develop General Controls over Technology: The organization implements ITGCs to ensure the reliability of financial reporting systems, including access controls and change management.

Are periodic access reviews for financial systems conducted and documented to comply with SOX policies? SOX Standard COSO Control Activities 12

Yes

Deploy Control Activities through Policies: The organization deploys control activities through policies that establish expectations, such as periodic access reviews.

Are periodic evaluations of internal controls for financial systems conducted to ensure ongoing SOX compliance? SOX Standard COSO Monitoring Activities 16

Yes

Conduct Ongoing and/or Separate Evaluations: The organization conducts ongoing or periodic evaluations of internal controls, including access to financial systems.

Does your organization have automated tools to ensure only authorized users access financial systems, preventing unauthorized transactions? SOX Section 404 ITGC - Access Control

Yes

Ensure only authorized users have access to financial systems to prevent unauthorized transactions or data manipulation.

Are segregation of duties (SoD) violations, such as users with conflicting financial roles, automatically detected and resolved? SOX Section 404 ITGC - Segregation of Duties

Yes

Prevent conflicts of interest by ensuring no single user can perform conflicting financial functions (e.g., initiating and approving transactions).

Does your organization have processes to monitor and attest to changes in financial system entitlements in real time? SOX Section 404 ITGC - Change Management

Yes

Control changes to financial systems to ensure integrity and reliability of financial reporting.

Full Name *

Email *

Phone *

Business *

GRC Partner Email(Optional)