Verify the SOX Content Pack in Policy and Compliance Management

After importing the SOX Content Pack, verify and edit the profile types, profiles, policies, policy statements, controls, policies, indicator templates, and indicators, within the Policy and Compliance Management application.

Before you begin

Role required: Compliance Admin (sn_compliance.admin)

Procedure

1. Navigate to All > Policy and Compliance > Scoping > Entity Types.
   A SOX Processes entity type is added and is used to generate the SOX profiles:

   • Accounts Receivable
   • Accounts Payable
   • Commissions
   • Equity
   • Entity Level
   • Financial Reporting
   • Fixed Assets
   • General Ledger
   • Human Resources
   • In Scope Application
   • Inventory
   • ITGC
   • Payroll
   • Purchasing
   • Revenue Recognition
   • SAP
   • SDLC
   • Tax
   • Travel and Expense
   • Treasury

   

2. If using the Kingston SOX contact pack, under the Entity filters related list, a filter is added to query the SOX processes table for the generation of SOX entities.
   
3. Open an entity to see all the downstream controls.

   

4. Navigate to Policy and Compliance > Policies and Procedures > Policies.
   All SOX policies have been added in the Draft state:

   • Accounts Payable Flowchart
   • Accounts Receivable Standard Operating Procedures
   • Commissions Standard Operating Procedures
   • Entity Level Standard Operating Procedures
   • Equity - Stock Based Compensation Standard Operating Procedures
   • Financial Reporting - Standard Operating Procedure
   • Fixed Assets Standard Operating Procedures
   • General Ledger - Flowchart

   

5. Open a SOX policy record.
   Notice that there is no text in the policy. Create your own policy and initiate the policy lifecycle.
6. Navigate to Policy and Compliance > Policies and Procedures > Policy Statements.
7. In the search bar, enter SOX in the Name field.
   Note:

   The names of all SOX-related policy statements begin with SOX.
   • All the SOX policy statements are created and assigned to SOX policies.
   • The SOX Control Attestation is created and added to the policy statement.

   

8. Navigate to Policy and Compliance > Controls.
9. In the search bar, enter SOX in the Name field.
   Note:

   The names of all SOX-related controls begin with SOX.
   • All the SOX controls are created for each entity.
   • The SOX Control Attestation is added to all controls with no attestation respondents.

   

10. Navigate to Policy and Compliance > Indicators.
    SOX Control Indicators were added and indicator templates were assigned to them.

    

Result

For information about the SOX Compliance Dashboard, see SOX Content Pack dashboard and reports.