Documenting evidence of control 3280
Leila last edited by
Is it a SOX deficiency if the control documentation verbiage does not state how the control is evidenced?
Denis last edited by
Short answer: Yes. It is important that a) the control description indicates how the control is evidenced and, more importantly, b) the control is actually evidenced in operation.