Documenting evidence of control 3280
-
Is it a SOX deficiency if the control documentation verbiage does not state how the control is evidenced?
-
Short answer: Yes. It is important that a) the control description indicates how the control is evidenced and, more importantly, b) the control is actually evidenced in operation.