What does a financial-controls framework engagement include?
Depending on scope, it can cover financial reporting risks, control descriptions, ownership, evidence requirements, testing and remediation. Start with the important processes and exposures rather than documenting every activity. SOX/ICFR readiness work is scoped to the organisation’s needs; it is not statutory audit or certification.
