Complify
[Ask AI Auditor]⌘J
Q3 SOX cycle · Week 6 of 9

Audit Command Center

Q3 SOX testing is 74% complete across four engagements. Seven decisions are waiting on you, two due today.

Needs your attention

Decisions waiting on you, each with a recommended action

AP-311 · Deficiency severity · Q3 SOX
Exception EX-119 — credit memo approval bypass

7 of 11,402 credit memos processed without secondary approval; $1.9M gross, $0.4M net exposure, below materiality. Monthly revenue analytic review detected 5 of 7.

RecommendedClassify as significant deficiencyby Morgan, Audit Manager
Today, 5:00 PM
AP-309 · Audit plan · FY27 audit plan
FY27 annual audit plan

Covers 78% of high-risk universe in 11,400 hours; defers two low-risk operational audits to FY28 to fund a cybersecurity review.

RecommendedApprove 24-audit plan, scenario Bby Avery, CAE Agent
Sep 18
AP-308 · Scope decision · Q3 SOX
SOX scope — Cerritos manufacturing location

Location now 11.4% of consolidated inventory after the Halcyon acquisition, above the 10% coverage threshold in methodology §4.2.

RecommendedBring in scope for inventory controlsby Morgan, Audit Manager
Sep 19
AP-306 · Risk rating · Enterprise risk
Residual risk rating — third-party logistics dependency

Two carrier outages in FY26, no tested contingency plan, velocity rated high. Control effectiveness assessed as partially effective.

RecommendedRaise residual risk from Moderate to Highby Priya, Audit Manager
Sep 22
AP-304 · Finding · Q3 SOX
Finding F-2071 — terminated user access

2 of 26 terminated users retained read-only NetSuite access for 4 and 9 days. No evidence of use; detective quarterly review operated.

RecommendedIssue finding, rated Mediumby Rowan, Senior Auditor
Sep 23
AP-301 · Sampling judgment · Q3 SOX
Reduced sample size for automated configuration control

Control is fully automated with change management ITGCs assessed effective; methodology permits single-item testing.

RecommendedTest 1 item plus configuration baselineby Tessa, Staff Auditor
Sep 24
AP-297 · Closure · Q3 SOX
Close finding F-2059 — bank reconciliation review

25 post-remediation samples retested with no exceptions across two consecutive months.

RecommendedClose as remediatedby Dev, Senior Auditor
Sep 25

AI vs. human hours

Weekly audit hours executed

W1
512
W2
604
W3
688
W4
742
W5
806
W6
871
AI agentsHuman review
89% of audit hours executed by AI. Human time stays focused on judgment.

Q3 SOX testing

94 of 128 controls tested

Order to Cash34/38
Procure to Pay22/31
Financial Close21/27
InventoryBehind9/24
ITGC19/25
Entity level8/8

AI audit team — live activity

Activity center →
TaskAgentStateProgressUpdated
Test RCM control R2C-014 — Credit memo approval
Objective: Complete Q3 SOX testing
Tessa
Staff Auditor
Executing
72%
2 min ago
Investigate exception EX-119 across full population
Objective: Complete Q3 SOX testing
Nova
Specialist
Executing
54%
6 min ago
Evaluate severity of exception EX-119
Objective: Complete Q3 SOX testing
Morgan
Audit Manager
Awaiting human
90%
18 min ago
User access review testing — NetSuite privileged roles
Objective: FY26 ITGC coverage
Rowan
Senior Auditor
In review
100%
42 min ago
Draft annual audit plan with resource scenarios
Objective: FY27 risk-based audit plan
Avery
CAE
Awaiting human
100%
1 hr ago
Vendor master data walkthrough with Procurement
Objective: Supply chain audit
Kai
Staff Auditor
Awaiting human
35%
2 hrs ago

Follow the lineage

Q3 credit memo exception

Nova · Data Analytics Agent

Expanded to 100% of FY26 Q3 credit memos: 7 of 11,402 bypassed approval, all created from the returns queue after the August workflow change.

Change intelligence

Signals the team acted on

Credit memo workflow modified in NetSuiteHigh
Exception EX-119 traced to this change
Halcyon Photonics consolidated into inventory reportingHigh
Scope decision AP-308 raised
NetSuite release cadence moved monthlyMedium
Sample increased from 25 to 40
New entity list restrictions publishedHigh
FY27 audit recommended