Sufficient Control Evidence? 654
SOX-Migration last edited by
:?: As a member of Internal Audit, I have been asked to provide guidance on what ‘sufficent control evidence’ would be.
Obviously, evidence has to be relevant, valid, understandable and timely, but has anybody received any details from your external auditors or others what would be’sufficient’??? Or any other guidance?
Many thanks for any info, links, hints etc.
IrquiM last edited by
isaca.org. What they use is what my company uses as a definition.
There is a PDF file with what you are looking for on that webpage. I cannot remember what it is called, and I’ve only got a print-out of some of the pages.