KPMG's Sarbanes Oxley Advisory Services (SOAS) can help an organization with the implementation and maintenance of sustainable SOX 404 compliance programs through readiness assessments, through documentation and testing assistance and through sustainability assessments. In each of these services KPMG firms' professionals work closely with clients to establish compliance programs, transfer knowledge and provide training to support a successful SOX 404 compliance program.

• Readiness assessments are used to determine how well prepared the organization is to implement a SOX 404 compliance program. It is designed to highlight gaps, and make recommendations, to help clients ensure implementation of a successful SOX 404 compliance program.
• Documentation and testing assistance is designed to help management support their assessment of their organization’s compliance with SOX 404 requirements.
• Sustainability assessments are designed to help clients evaluate and improve on their initial SOX 404 compliance efforts.

For each of these services, KPMG takes a risk-based approach to identify the internal controls over financial reporting risks (ICFR) that the organization either has in place, or needs, to address its key financial reporting risks and to support the implementation of its chosen control framework (e.g. COSO).

SOAS projects for our member firms’ clients are based upon our global SOAS methodology and supplemental materials — e.g. the point of view (POV) documents that have been created as a result of the SEC’s Interpretive Guidance for management. SOAS projects are delivered by our Internal Audit Risk & Compliance Services (IARCS) personnel, supported by appropriate subject matter professionals, throughout the KPMG network.

KPMG’s SOAS services can help clients:

• Prepare for an initial compliance program that takes advantage of the most recent guidance to create a cost effective approach to SOX 404 compliance that is suited to the organization.
• Create clearer links between risks and management’s decisions and judgments about how those risks are managed through a company’s approach to ICFR.
• Reduce documentation and testing hours through the use of a more focused testing strategy that accounts for the impact of new or existing direct and monitoring entity-level controls and only testing process level controls that are directly related to identified financial reporting risks at the assertion level.
• Identify and implement year-on-year improvements to the SOX 404 compliance to reduce costs and improve effectiveness of a client’s on-going SOX 404 compliance efforts.

Data analytics, intelligent automation and many others. Advantages to utilizing KPMG’s Internal Audit Services include:

• Advising on IA costs — The cost savings can be significant, particularly for those organizations that experience significant global travel, high turnover of IA resources or varying IA activity levels.
• Access the right skills, in the right place, at the right time — Sourcing provides the flexibility to adapt to changing business needs.
• Leverage KPMG firms’ infrastructure — With the costs of developing and maintaining an IA capability shifted to KPMG, your capital and resources are freed for other purposes.
• Access leading practices and subject matter professionals — Professionals from areas such as IT, forensic, treasury, risk management, financial instruments, procurement, shared services, third-party contracting and tax are available.
• Access global resources — Provision of local resources where you need them, leading to reduced travel costs, increased understanding of the local culture and business environment, and local language skills.
• Address human resource challenges — Attracting and retaining talent, maintaining knowledge on evolving risks and developing the skills to drive value can be addressed by KPMG firms’ professionals.
• Access leading methodologies — Our global IA methodologies and supporting technologies are risk-based and scalable.

Through a strategic Performance Review for internal audit, KPMG firms can help you align your IA function’s strategic objectives with key business processes, taking into account overall risk management, compliance monitoring, and business performance. As a result, we can help your internal audit function perform and operate more effectively.