YouAttest GRC Survey for SOX YouAttest is a certified identity re-certification tool that automates identity governance. This survey will help determine if your security and governance would improve with YouAttest. Does your organization have automated processes to ensure only authorized personnel access financial reporting systems? SOX Standard COSO Control Environment 1Commitment to Integrity and Ethical Values: The organization demonstrates a commitment to integrity and ethical values, ensuring financial reporting systems are protected from unauthorized access or manipulation. Please select your answer Yes No Are roles and responsibilities for financial system access clearly defined and periodically reviewed? SOX Standard COSO Control Environment 3Establishment of Structures, Reporting Lines, and Authorities: The organization establishes structures, reporting lines, and appropriate authorities and responsibilities for financial reporting. Please select your answer Yes No Does your organization have tools to identify and analyze identity-related risks, such as over-privileged accounts, in financial systems? SOX Standard COSO Risk Assessment 6Identify and Analyze Risks: The organization identifies risks to the achievement of financial reporting objectives, including IT-related risks like unauthorized access. Please select your answer Yes No Are IT general controls (ITGCs), such as access control and segregation of duties, automated to mitigate risks to financial reporting? SOX Standard COSO Control Activities 10Select and Develop Control Activities: The organization selects and develops control activities, including IT general controls (ITGCs), to mitigate risks to financial reporting. Please select your answer Yes No Does your organization have automated processes to monitor and review changes to financial system access rights? SOX Standard COSO Control Activities 11Select and Develop General Controls over Technology: The organization implements ITGCs to ensure the reliability of financial reporting systems, including access controls and change management. Please select your answer Yes No Are periodic access reviews for financial systems conducted and documented to comply with SOX policies? SOX Standard COSO Control Activities 12Deploy Control Activities through Policies: The organization deploys control activities through policies that establish expectations, such as periodic access reviews. Please select your answer Yes No Are periodic evaluations of internal controls for financial systems conducted to ensure ongoing SOX compliance? SOX Standard COSO Monitoring Activities 16Conduct Ongoing and/or Separate Evaluations: The organization conducts ongoing or periodic evaluations of internal controls, including access to financial systems. Please select your answer Yes No Does your organization have automated tools to ensure only authorized users access financial systems, preventing unauthorized transactions? SOX Section 404 ITGC - Access ControlEnsure only authorized users have access to financial systems to prevent unauthorized transactions or data manipulation. Please select your answer Yes No Are segregation of duties (SoD) violations, such as users with conflicting financial roles, automatically detected and resolved? SOX Section 404 ITGC - Segregation of DutiesPrevent conflicts of interest by ensuring no single user can perform conflicting financial functions (e.g., initiating and approving transactions). Please select your answer Yes No Does your organization have processes to monitor and attest to changes in financial system entitlements in real time? SOX Section 404 ITGC - Change ManagementControl changes to financial systems to ensure integrity and reliability of financial reporting. Please select your answer Yes No 1 out of 10 Thank you for completing the SOX Assessment! Your responses have been successfully recorded, and your personalized results are now available. Below, you’ll find your overall score along with a detailed breakdown of key controls that may require attention. Use these insights to strengthen and refine your security posture. Important: Please fill out the contact form below, to retrieve your full results and in-depth analysis. Name Email Business Phone GRC Partner Email (optional) Time's up
