Our Approach and Methodology
SecureState’s GLBA Gap Assessment/Pre-Audit approach maps critical
information processes to determine if regulatory controls have business
impact. The goals are to:
- Evaluate the effectiveness of your SOX compliance program
- Validate SOX controls
- Remediation cost-justification
The stages of our SOX Gap Assessment - Pre-Audit, with limited
descriptions, is as follows:
Pre-Onsite Visit:
- Introduce engagement participants and define roles
- Review engagement activities
- Review any applicable documentation
Process Mapping:
- Document the high level in-scope SOX systems and technical
infrastructure
Requirements Analysis:
- Document the existing controls used to protect in-scope SOX Assets
- Identify gaps against the SOX requirements
Reporting:
- On-site interview and information gathering to assess SOX compliance
status
- Outline strategic recommendations to mitigate identified control
gaps
- Upload remediation activities to “MyState Portal”