Issues lifecycle
Deficiencies
Formal SOX deficiency evaluation and tracking. Complify assembles the magnitude, likelihood, compensating control and aggregation analysis; the classification is always a human conclusion.
By process
- Procure to Pay2
- ITGC — Access2
- Revenue to Cash1
- Treasury1
By entity
- Northbridge US5
- Northbridge Group1
By root cause
- Insufficient Documentation2
- System Configuration1
- Change Management1
- Segregation of Duties1
- Access1
Deficiencies (5)
Click a deficiency to open the evaluation workspace
| Deficiency | Process | Controls | Findings | Accounts | Assertions | Classification | Likelihood | Magnitude | Status | Owner | Remediation | Target | Age |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Procure to Pay | P2P-008 | F-2026-014F-2061 | Accounts payable, Cash | Existence, Accuracy | Reasonably Possible | More than inconsequential | Pending classification | Procurement Controller | In progress — 65% | Nov 30, FY26 | 12d | ||
| Revenue to Cash | R2C-014 | F-2074 | Revenue, Accounts receivable | Occurrence, Accuracy | Reasonably Possible | More than inconsequential | Pending classification | Director, Revenue Accounting | Plan under review | Dec 31, FY26 | 20d | ||
| ITGC — Access | ITGC-004 | F-2068 | Multiple | Occurrence, Accuracy | Significant Deficiency | Reasonably Possible | More than inconsequential | Remediation in progress | CIO | In progress — 46% | Jan 31, FY27 | 37d | |
| ITGC — Access | ITGC-017 | F-2071 | All financially relevant applications | Existence | Control Deficiency | Remote | More than inconsequential | Ready for retest | IT Operations Lead | Management complete — ready for retest | Nov 30, FY26 | 17d | |
| Procure to Pay | P2P-008 | F-2061 | Accounts payable | Existence | Control Deficiency | Remote | More than inconsequential | Remediation in progress | Procurement Controller | Evidence submitted — 80% | Nov 15, FY26 | 58d |
Ask Complify — management reporting
Every summary links back to the underlying records