COBIT 5 Foundation Course https://www.microteklearning.com/courses/cobit-5-foundation.html https://www.microteklearning.com/category/python.html https://www.microteklearning.com/category/isaca.html

Wishing good luck … Found a lot of excellent links in GOOGLE search of “interview questions for sarbanes oxley” that can help perpare the way. And take a look at Wikipedia on topics of “coso” “cobit” and “sarbanes oxley” reading in-depth to know the basics. Finally, research firm as much as possible in advance to know their products/services/culture/history, etc …

SOX is a detailed audit process to provide fiscal integrity & ensure a sound framework for investors. For Investor Relations team of employees, there is perhaps an indirect relationship to ensure this audit discipline gets done on timely, thoroughly, and transparent approach. For example, if SOX failures are noted by external audits & failure to correct issues occur – there is dangers could spill over to stock investors. And thus there is an oversight & support role for IR. Still, the more direct role of design & testing of controls is likely outside of scope (depending on role & responsibilities) of IR.

Bump. As if this wasn’t at the top of the list already. I thought I had posted something, but because it was STILL at the top of the list I couldn’t find it. Has posting dropped off that much or are all the questions answered? Wasn’t someone trying to buy this forum at one time? Here’s one question to add. Does anyone have any rule 10(b) 5 experience? What constitutes discovery of the violation in the case of concealment oF THE fraud? Does statute of repose mean if you do not discover in three years the fraud goes in the books as if it was adjudicated? Would state statutes of garden variety fraud substitute for 10 (b)5? As if any judge even follows the rules anyway… PLEASE HELP IF YOU HAVE ANY INFORMATION.

The latest IT standards are reflected in the COBIT 5.0 standards framework … There are no set rules on this approach as the standards are written at a high level to allow a wide variety of IT topologies from the mainframe to client-server to cloud based applications to be covered under the wide umbrella of standards. It would be valuable to ensure the DR recovery process meets SOX standards for financial systems as follows (looking at COBIT links below for improved guidance) COMPREHENSIVE and covers all the key master files RETENTION of backup files can meet recovery goals SECURITY is in place to ensure protection of backup files from unauthorized access http-and-#58;//www.isaca.org/COBIT/Pages/default.aspx https-and-#58;//en.wikipedia.org/wiki/COBIT

The latest IT standards are reflected in the COBIT 5.0 standards framework … They are actually PMM independent (as we use Agile in our company). COBIT and COSO are designed to fit a wide variety of PMM approaches and methodologies as they remain neutral in that respect … the key is ensuring internal and external audit are in agreement with the documentation, testing, IT standards, and other changes associated with moving to Agile PMM process http-and-#58;//www.isaca.org/COBIT/Pages/default.aspx https-and-#58;//en.wikipedia.org/wiki/COBIT

The latest IT standards are reflected in the COBIT 5.0 standards framework … while there are no set absolute frequency rules – one must thoroughly backup data to protect all current key financial systems … Plus there is a need to preserve 7 years of historical data in some cases also http://www.isaca.org/COBIT/Pages/default.aspx https://en.wikipedia.org/wiki/COBIT

Once you determine which accounts you want to review, you should ask management for explanations. You would want to consider the specific audit risks for each account to determine how deep of a dive you take with management in understanding the fluxes. You want to be able to get comfortable with management’s explanations. That may mean reviewing account transactions or reconciliations (in the case of balance sheet accounts). Remember, that as an auditor, it is your job to understand the financial statements and how transactions impact the various accounts. Inquiry only will not be sufficient in most cases, especially since you are not familiar with the business or the financials.

What’s so different about the Sarbanes-Oxley Act compared with the UK Combined Code? Easy. One has legal jurisdiction in the UK and the other has it in the US. The principles of both are quite similar and a UK company that ws following the combined code (rather than paying lip service to it) would have no difficulty in complying with SOX if it needed to.

Not exactly sure that I follow what you are alleging. Kodak has been in financial difficulty for a while, principally stemming from it’s failure to deal with the challenges arising from imaging becoming mostly digital over the last few years. Kodak failed to fund it’s contractual liability to the UK pension - KPP - and ended up with a USD2.8 bn liability, that it appears to have recently settled. Are you alleging that the UK pension liability was somehow inflated? That executives have chosen to inflate the UK liabilty for some unseen ulterior motive? The UK pensioners (the plan has 15,000 members and nearly 9,000 current pensioners) have certainly not benefitted from this as the settlement will mean that the benefits of the scheme will be significantly reduced.

Short answer: Yes. It is important that a) the control description indicates how the control is evidenced and, more importantly, b) the control is actually evidenced in operation.

Krish i was call you but you not response