{"product_id":"how-to-comply-with-sarbanes-oxley-section-404-isbn-9780470169308","title":"How to Comply with Sarbanes-Oxley Section 404","description":"Now fully revised and updated, the \u003ci\u003eThird Edition\u003c\/i\u003e of \u003ci\u003eHow to Comply with Sarbanes-Oxley Section 404: Assessing the Effectiveness of Internal Control\u003c\/i\u003e is the perfect starting point for companies with no previous SOX experience. Packed with practice aids including forms, checklists, illustrations, diagrams, and tables, the new edition leads auditing professionals through every step of the audit processes associated with Section 404 compliance.  Preface.  \u003cp\u003eAcknowledgments.\u003c\/p\u003e \u003cp\u003eChapter 1. The Evaluation Approach.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eManagement’s Evaluation of Internal Control.\u003c\/p\u003e \u003cp\u003eOverview of the Evaluation Process.\u003c\/p\u003e \u003cp\u003eRisk-Based Judgments.\u003c\/p\u003e \u003cp\u003eWhy Understanding Risk is Important.\u003c\/p\u003e \u003cp\u003eA Risk-Based, Top-Down Evaluation Approach.\u003c\/p\u003e \u003cp\u003eIdentification of Misstatement Risk.\u003c\/p\u003e \u003cp\u003eAssessment of Misstatement Risk.\u003c\/p\u003e \u003cp\u003eThe Likelihood of Control Failure.\u003c\/p\u003e \u003cp\u003eA \"Top-Down\" Approach to Identifying Relevant Controls.\u003c\/p\u003e \u003cp\u003eThe Independent Auditor's Reporting Responsibilities.\u003c\/p\u003e \u003cp\u003eOverall Objective of the Auditor's Engagement.\u003c\/p\u003e \u003cp\u003eUse of Work of Internal Auditors and Others.\u003c\/p\u003e \u003cp\u003eWorking with the Independent Auditors.\u003c\/p\u003e \u003cp\u003eChapter 2. Internal Control Criteria.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eThe Need for Control Criteria.\u003c\/p\u003e \u003cp\u003eThe COSO Internal Control Integrated Framework.\u003c\/p\u003e \u003cp\u003eKey Characteristics of the COSO Framework.\u003c\/p\u003e \u003cp\u003eBy Way of Analogy.\u003c\/p\u003e \u003cp\u003eFive Components of Internal Control.\u003c\/p\u003e \u003cp\u003eThe Control Environment.\u003c\/p\u003e \u003cp\u003eRisk Assessment.\u003c\/p\u003e \u003cp\u003eControl Activities.\u003c\/p\u003e \u003cp\u003eInformation and Communication.\u003c\/p\u003e \u003cp\u003eMonitoring.\u003c\/p\u003e \u003cp\u003eInternal Control for Small Businesses.\u003c\/p\u003e \u003cp\u003eControls Over Information Technology Systems.\u003c\/p\u003e \u003cp\u003eCOSO Guidance.\u003c\/p\u003e \u003cp\u003eThe COBIT Framework.\u003c\/p\u003e \u003cp\u003eChapter 3. Project Scoping.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eIntroduction.\u003c\/p\u003e \u003cp\u003eOne Size Does Not Fit All.\u003c\/p\u003e \u003cp\u003eEntity-Level Controls.\u003c\/p\u003e \u003cp\u003eApplying the Top-Down, Risk Based Approach.\u003c\/p\u003e \u003cp\u003eCorporate Culture.\u003c\/p\u003e \u003cp\u003ePersonnel Policies.\u003c\/p\u003e \u003cp\u003eIT General Controls.\u003c\/p\u003e \u003cp\u003eRisk Identification.\u003c\/p\u003e \u003cp\u003eMonitoring.\u003c\/p\u003e \u003cp\u003eAnti-Fraud Programs and Controls.\u003c\/p\u003e \u003cp\u003ePeriod-End Financial Reporting Processes.\u003c\/p\u003e \u003cp\u003eIdentifying Significant Activity-Level Control Objectives.\u003c\/p\u003e \u003cp\u003eAppendix A. Action Plan: Identifying Significant Control Objectives.\u003c\/p\u003e \u003cp\u003eAppendix B.Example Control Objectives.\u003c\/p\u003e \u003cp\u003eChapter 4. Project Planning.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eThe Objective Of Planning.\u003c\/p\u003e \u003cp\u003eInformation Gathering For Decision Making.\u003c\/p\u003e \u003cp\u003eOrganize Your Project According to Business Process Activities.\u003c\/p\u003e \u003cp\u003eAreas of Focus.\u003c\/p\u003e \u003cp\u003eDefining Internal Control Deficiencies.\u003c\/p\u003e \u003cp\u003eProject Scope and Existing Efforts to Assess Internal Control Effectiveness.\u003c\/p\u003e \u003cp\u003eOther Scope Considerations.\u003c\/p\u003e \u003cp\u003eInformation Sources.\u003c\/p\u003e \u003cp\u003eSEC Form 10K.\u003c\/p\u003e \u003cp\u003eOther Information Sources.\u003c\/p\u003e \u003cp\u003eInquiries.\u003c\/p\u003e \u003cp\u003eAdditional Guidance.\u003c\/p\u003e \u003cp\u003eStructuring The Project Team.\u003c\/p\u003e \u003cp\u003eEstablishing Responsibilities and Lines of Reporting.\u003c\/p\u003e \u003cp\u003eProject Team Members.\u003c\/p\u003e \u003cp\u003eCoordinating With The Independent Auditors.\u003c\/p\u003e \u003cp\u003eReach Consensus on Planning Matters.\u003c\/p\u003e \u003cp\u003eDocumenting Your Planning Decisions.\u003c\/p\u003e \u003cp\u003eAppendix 4A. Action Plan: Project Planning.\u003c\/p\u003e \u003cp\u003eAppendix 4B. Summary of Planning Questions.\u003c\/p\u003e \u003cp\u003eChapter 5. Documentation of Internal Controls.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eThe Importance of Documentation.\u003c\/p\u003e \u003cp\u003eAssessing The Adequacy Of Existing Documentation.\u003c\/p\u003e \u003cp\u003eWhat Should Be Documented.\u003c\/p\u003e \u003cp\u003eHow Much to Document.\u003c\/p\u003e \u003cp\u003eDocumentation Of Entity-Level Control Policies And Procedures.\u003c\/p\u003e \u003cp\u003eCorporate Governance Documents.\u003c\/p\u003e \u003cp\u003eCode of Conduct.\u003c\/p\u003e \u003cp\u003eOther Documentation.\u003c\/p\u003e \u003cp\u003eDocumenting Activity-Level Controls.\u003c\/p\u003e \u003cp\u003eDetermine the Controls to Be Documented.\u003c\/p\u003e \u003cp\u003eHow to Design Internal Control Documentation.\u003c\/p\u003e \u003cp\u003eFlowcharting.\u003c\/p\u003e \u003cp\u003eNarratives.\u003c\/p\u003e \u003cp\u003eMatrixes.\u003c\/p\u003e \u003cp\u003eSarbanes-Oxley Automated Compliance Tools.\u003c\/p\u003e \u003cp\u003eFunctions of an Automated Sarbanes-Oxley Tool.\u003c\/p\u003e \u003cp\u003eImplementation Is Critical.\u003c\/p\u003e \u003cp\u003eAssessing the Control Warehouse Function.\u003c\/p\u003e \u003cp\u003eManaging the Testing of Controls.\u003c\/p\u003e \u003cp\u003eAutomated Control Procedures.\u003c\/p\u003e \u003cp\u003eThe Value of an Automated Compliance Tool.\u003c\/p\u003e \u003cp\u003eCoordinating With The Independent Auditors.\u003c\/p\u003e \u003cp\u003eAppendix 5A. Action Plan: Documentation.\u003c\/p\u003e \u003cp\u003eAppendix 5B. Linkage of Significant Control Objectives to Example Control Policies and Procedures.\u003c\/p\u003e \u003cp\u003eNote.\u003c\/p\u003e \u003cp\u003eChapter 6. Testing and Evaluating Entity-Level Controls.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eOverall Objective Of Testing Entity-Level Controls.\u003c\/p\u003e \u003cp\u003eRelationship between Entity-Level and Application-Level Controls.\u003c\/p\u003e \u003cp\u003eDesign Effectiveness versus Operational Effectiveness.\u003c\/p\u003e \u003cp\u003eTesting Techniques.\u003c\/p\u003e \u003cp\u003eThe Nature of Available Evidence.\u003c\/p\u003e \u003cp\u003eSurvey and Inquiries of Employees.\u003c\/p\u003e \u003cp\u003eInquiries of Management.\u003c\/p\u003e \u003cp\u003eIT General Controls.\u003c\/p\u003e \u003cp\u003eReading and Assessment of Key Documents.\u003c\/p\u003e \u003cp\u003eObservation of Processes.\u003c\/p\u003e \u003cp\u003eMonitoring.\u003c\/p\u003e \u003cp\u003eEvaluating The Effectiveness Of Entity-Level Controls.\u003c\/p\u003e \u003cp\u003eMaking the Assessment.\u003c\/p\u003e \u003cp\u003eFive Levels of Reliability.\u003c\/p\u003e \u003cp\u003eResponding to Identified Weaknesses.\u003c\/p\u003e \u003cp\u003eDocumenting Test Results.\u003c\/p\u003e \u003cp\u003eCoordinating With The Independent Auditors.\u003c\/p\u003e \u003cp\u003eAppendix 6A. Action Plan: Testing and Evaluating Entity-Level Controls.\u003c\/p\u003e \u003cp\u003eAppendix 6B. Survey Tools.\u003c\/p\u003e \u003cp\u003eExample Letter To Employees In Advance Of Employee Survey.\u003c\/p\u003e \u003cp\u003eNotes.\u003c\/p\u003e \u003cp\u003eExample Employee Survey Of Corporate Culture And Personnel Policies.\u003c\/p\u003e \u003cp\u003ePurpose of the Survey.\u003c\/p\u003e \u003cp\u003eConfidentiality.\u003c\/p\u003e \u003cp\u003eInstructions.\u003c\/p\u003e \u003cp\u003eNotes.\u003c\/p\u003e \u003cp\u003eEvaluation Of Employee Survey Results.\u003c\/p\u003e \u003cp\u003eEvaluating Results.\u003c\/p\u003e \u003cp\u003eAppendix 6C. Example Inquiries of Management Regarding Entity-Level Controls.\u003c\/p\u003e \u003cp\u003eInstructions For Use.\u003c\/p\u003e \u003cp\u003eChapter 7. Testing and Evaluating Activity-Level Controls.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eIntroduction.\u003c\/p\u003e \u003cp\u003eConfirm Your Understanding Of The Design Of Controls.\u003c\/p\u003e \u003cp\u003eWhat’s a Walkthrough?\u003c\/p\u003e \u003cp\u003eSuggestions for Performing a Walkthrough.\u003c\/p\u003e \u003cp\u003eAssessing The Effectiveness Of Design.\u003c\/p\u003e \u003cp\u003eFinancial Statement Assertions and Controls.\u003c\/p\u003e \u003cp\u003eInformation-Processing Streams.\u003c\/p\u003e \u003cp\u003eOperating Effectiveness.\u003c\/p\u003e \u003cp\u003eTest Design Considerations.\u003c\/p\u003e \u003cp\u003eA Risk-Based Approach to Designing Tests.\u003c\/p\u003e \u003cp\u003eSample Sizes and Extent of Tests.\u003c\/p\u003e \u003cp\u003eTypes of Tests.\u003c\/p\u003e \u003cp\u003eEvaluating Test Results.\u003c\/p\u003e \u003cp\u003eDocumentation Of Test Procedures And Results.\u003c\/p\u003e \u003cp\u003eCoordinating With The Independent Auditors.\u003c\/p\u003e \u003cp\u003eAppendix 7A. Action Plan: Documentation.\u003c\/p\u003e \u003cp\u003eAppendix 7B. Example Inquiries.\u003c\/p\u003e \u003cp\u003eChapter 8. Evaluating Control Deficiencies and Reporting on Internal Control Effectiveness.\u003c\/p\u003e \u003cp\u003eChapter Summary.\u003c\/p\u003e \u003cp\u003eControl Deficiencies.\u003c\/p\u003e \u003cp\u003eEvaluating Control Deficiencies.\u003c\/p\u003e \u003cp\u003eAssessing the Likelihood and Significance of Misstatement.\u003c\/p\u003e \u003cp\u003eDeficiencies that May be Material Weaknesses.\u003c\/p\u003e \u003cp\u003eCompensating Controls.\u003c\/p\u003e \u003cp\u003eThe \"Prudent Official Test\".\u003c\/p\u003e \u003cp\u003eAnnual and Quarterly Reporting Requirements.\u003c\/p\u003e \u003cp\u003eManagement's Report When a Material Weakness Exists at Year-End.\u003c\/p\u003e \u003cp\u003e\"As Of\" Reporting Implications.\u003c\/p\u003e \u003cp\u003eExpanded Reporting On Management's Responsibilities For Internal Control.\u003c\/p\u003e \u003cp\u003eResponsibility for Financial Reporting.\u003c\/p\u003e \u003cp\u003eCoordinating With The Independent Auditors And Legal Counsel.\u003c\/p\u003e \u003cp\u003eIndependent Auditors.\u003c\/p\u003e \u003cp\u003eLegal Counsel.\u003c\/p\u003e \u003cp\u003eAppendix 8A. Action Plan: Reporting.\u003c\/p\u003e \u003cp\u003e2. Prepare Required Report.\u003c\/p\u003e \u003cp\u003eIndex.\u003c\/p\u003e \u003cp\u003eMichael J. Ramos, CPA, also author of Wiley GAAS, is a consultant who writes extensively on emerging auditing matters. He has written numerous successful pro-ducts, including non-authoritative practiceaids, implementation guides and authorita-tive AICPA audit and accounting guides. In addition to text-based products, he has also authored a variety of training programs, including computer-based multimedia training and audio and video scripts. Ramos has written in the areas of ethics, auditing, internal control, and fraud detection.\u003c\/p\u003e   \u003cp\u003eHow to Comply with Sarbanes-Oxley Section 404 Third Edition\u003c\/p\u003e \u003cp\u003eNow fully revised and updated, the Third Edition of How to Comply with Sarbanes-Oxley Section 404: Assessing the Effectiveness of Internal Control is the perfect starting point for companies with no previous SOX experience to get up to speed quickly. Packed with practice aids including forms, checklists, illustrations, diagrams, and tables, the new edition leads auditing professionals through every step of the audit processes associated with Section 404 compliance.\u003c\/p\u003e \u003cp\u003eWritten by author and renowned auditing expert Michael Ramos, the Third Edition of this easy-to-follow and practical guide updates readers on a number of changes that have taken place since publication of the Second Edition. This indispensable guide includes:\u003c\/p\u003e \u003cul\u003e \u003cli\u003e \u003cp\u003eFull incorporation of new interpreta-tions from SEC, PCAOB and COSO, with particular emphasis on SOX 404 as it relates to smaller public companies\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eComprehensive, step-by-step approach for engagement performance with in-depth explanations and practice aids\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003ePractical advice on making sound judgments about the internal control testing and evaluation process\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eGuidance on making the assessment of internal control more effective and less of a drain on already limited resources\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eCoverage of post-implementation best practices that enable companies to develop strategies and approaches for ongoing compliance\u003c\/p\u003e \u003c\/li\u003e \u003c\/ul\u003e \u003cp\u003eSarbanes-Oxley is about process and requires more than just the reporting of results alone. How to Comply with Sarbanes-Oxley Section 404: Assessing the Effectiveness of Internal Control, Third Edition provides auditing professionals with everything necessary to apply these matters now so important to our financial reporting system.\u003c\/p\u003e  \u003cp\u003eFully revised and updated\u003c\/p\u003e \u003cp\u003eA step-by-step approach for planning and performing an assessment of internal controls\u003c\/p\u003e \u003cp\u003eThoroughly revised and updated, How to Comply with Sarbanes-Oxley Section 404, Third Edition brings practical clarity to a complex topic, providing a comprehensive, logically structured approach to effective testing and evaluation of internal controls within your company. Informative and clear, this refreshingly readable book demonstrates author Michael Ramos's deep understanding of the technical 404 requirements and contains the most pertinent updates and important SEC and PCAOB releases.\u003c\/p\u003e \u003cp\u003eThe Third Edition helps CFOs, auditors, corporate managers, and consultants knowledgably interpret and conform to Sarbanes-Oxley Section 404 compliance and features:\u003c\/p\u003e \u003cul\u003e \u003cli\u003e \u003cp\u003eClear, jargon-free coverage of the Sarbanes-Oxley Act and how it affects you\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eExamples and action plans providing blueprints for implementing requirements of the Act\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eEasy-to-understand coverage of the requirements of SEC, PCAOB, and COSO guidance\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eDiscussion of the requirements for assessing internal control effectiveness\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eA look at how the new guidance will reduce your costs\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003eIn-depth explanations to help professionals understand how best to approach the internal control engagement\u003c\/p\u003e \u003c\/li\u003e \u003cli\u003e \u003cp\u003ePractice aids, including forms, checklists, illustrations, diagrams, and tables\u003c\/p\u003e \u003c\/li\u003e \u003c\/ul\u003e \u003cp\u003eThis area of auditing and corporate governance will continue to evolve and bring about business and cultural change. How to Comply with Sarbanes-Oxley Section 404, Third Edition is your must-have, must-own guide to SOX 404 implementation and an effective tool and reference guide for every corporate manager.\u003c\/p\u003e","brand":"Wiley","offers":[{"title":"Default Title","offer_id":47989377925349,"sku":"NP9780470169308","price":110.0,"currency_code":"USD","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1842\/7735\/files\/9780470169308.jpg?v=1761783879","url":"https:\/\/k12savings.com\/es\/products\/how-to-comply-with-sarbanes-oxley-section-404-isbn-9780470169308","provider":"K12savings","version":"1.0","type":"link"}