This course speaks directly to the importance of general controls (GC), application controls (AC) and spreadsheet controls as they relate to Sarbanes-Oxley (SOX) and also provides meaningful insight into the SOX IT Control Environment. SOX IT controls aim to guarantee that systems are accurate, holistic, and error-free, as this may affect financial reporting. In the initial years of SOX compliance, many felt that a material weakness could not result from a failure of any type of Information Technology (IT) control. The world has changed, and IT is no longer simply a back office function. IT is of strategic importance to internal control over financial reporting (ICFR), and it must be adequately evaluated from both a GC and AC level.
The Public Company Accounting Oversight Board (PCAOB) and Securities and Exchange Commission (SEC) guidance states technology controls should only be part of SOX 404 to the extent specific financial risks are addressed. This approach can significantly reduce the scope of IT controls required in the assessment. Scoping decision is part of the entity's top-down risk assessment and can utilize a baselining approach. However, to understand the aspects of how to scope and baseline information technology controls, the assessor must have a strong understanding of how technology controls impact internal controls over financial reporting.
NOTE: The Instructor has created 5 new segments on Sarbanes-Oxley Update - 20 Years Later:
Sarbanes-Oxley Update - 20 Years Later: Accounting Risk Assessment Considerations
Sarbanes-Oxley Update - 20 Years Later: Sourcing Emerging Risks Part 1
Sarbanes-Oxley Update - 20 Years Later: Evaluating Testing Processes
Sarbanes-Oxley Update - 20 Years Later: Sourcing Emerging Risks Part 2
Sarbanes-Oxley Update - 20 Years Later: Examining Fraud Risks
Prerequisites
No Advanced Preparation or Prerequisites are needed for this course, but completion of the instructor's previous webinars on Sarbanes-Oxley (SOX) may be helpful.
Learning Objective
- Identify controls to evaluate as it relates to Information Technology (IT) and Sarbanes-Oxley (SOX).
- Explore the SOX IT Control Framework, and recognize how to approach IT evaluation.
- Explore IT Entity controls.
- Explore Application Controls (AC) vs. General Controls (GC).
- Identify Information Technology General Controls (ITGC) that are specific to Financial Reporting (FR).
Last updated/reviewed: July 11, 2025
(271) Reviews
(280 rating)If I must write a minimum of fifty characters I will, but know that I do so under protest.
A bit long and it should have been a more informative on the key elements as well as the testing material.
Lots of new information on big datas role with fraud detection.
Low resolution of video made it hard to see visuals, and the speed at which content was covered made it hard to take notes.
The course was very informative and interesting. The skills to be involved with the Internal Audit function are both technical and interpersonal. As we work towards this function, it is difficult to find staff with the right skill set. The instructor was very good and understandable.
I liked the content but there were not enough specific examples on how SOX is applied.
Have to say that this is a good, exhaustive and updated trainning on COSO and anyone can take a nice understanding of the whole picture
This class gets into the details of short-term rentals. There was more to it than initially thought.
A good primer for people moving into a leadership position.
Great overview of entity level controls and process level controls!
This course was effective and easily disgestible. Easy to follow, the continuous play video feature was useful as well.
I've been using pivot tables for years and still picked up a few helpful hints in this lesson. This is a very useful session for any user.
This was an interesting introductory course into powerBI and its uses
Very good concise synopsis of IT controls and their synergy with COSO.
Very beneficial and refreshes some of the details for my role being a second line of defense.
I found the course to be interesting and the exam to be challenging. The professor was fun to watch and I will look for other of her classes.
Lynn provided a great overview of the options for documenting controls, narratives or flow charts, as well as the key elements for developing the control documentation. This course would be very beneficial to accounting staff members to educate them on control development.
Hope you can add controls and process flows on investments and derivatives
I like this instructor's materials, they are well written and contain good information.
content was a little dry and the wording of the final exam questions was terrible...please get a 3rd party to review for clarity, consistency and understandability
The instructor was clear and offered practical applications of the controls. The reference materials were also helpful.
my score was 73% , this is not good enough, I need to study more.
Helps provide a quick guide to different leadership styles.
Insightful overview of budgeting. Great examples of how to navigate the corporate budgeting process.
Rob does an outstanding job of effectively teaching the Key Performance Indicators and KPI Dashboards. The course was well-structured, providing a comprehensive understanding of KPIs and their critical role in measuring and driving business performance. The content was insightful and easy to follow, with a perfect blend of theory and practical examples. The section on creating KPI dashboards was particularly valuable, offering hands-on guidance on designing and implementing effective dashboards that provide real-time insights into business performance. The instructor was knowledgeable and engaging, making complex concepts accessible and relevant. The interactive elements and practical exercises helped reinforce the learning and provided me with the confidence to apply these concepts to my own work. Overall, this course is a must for anyone looking to deepen their understanding of KPIs and enhance their ability to track and manage performance effectively. I highly recommend it!
Such a great course, and very useful tools! I would highly recommend it.
Principles of Ethical Team Leadership is an important part of corporate culture. learning the fundamental principles will increase the value of the company and benefit everyone involved
very good overview and current topics presented were relevant .
It's hard to distill the entire history of ethical thought down into a 2 hour business course, but I give credit to the instructor for making the effort.
I think the instructor does a great job explaining the information and providing good examples.
The excitement of the content combined with the enthusiasm and insight of Mr. Wasny make this course, along with those he presents on AI, the most inspiring and motivational I've experienced on this platform.
Provides a solid intro course for learning about the basics of cyber security, including defining the function of a Cyber Program and critical cyber roles in an organization. Also provides a decent overview on controls and common threat vectors.
This text based course was very detailed and provided good examples of real world application
I enjoyed getting to now some of the automation areas that are being seen across SOX compliant companies.
The course is well organized and easy to understand!
Great course on ethical and regulatory considerations for remote employees. This will interest you!
good course, a lot of good information provided verbally and not in slides.
The material is dense and detailed. Be prepared to read and reread to fully comprehend.
A great review of what communication really is. Highlights ideas that are not intuitively known.
I like how the instructor works through simple, real examples of the close process. Good refresher.
Exam was helpful in understanding the importance of a top-down risk assessment. Thank you.
Concise information that's easy to follow and understand.
Good ethics overview course with real life examples
not sure I agree with this question and answer: Question: Which of the following is not a disclosure control procedure?
Interesting class. The final exam comes more from the class than the handouts, would like to see all material in a hand out for reference after the class.
Content and material was very sloppy. Overall the instructor was incredibly knowledgeable, however one of the key concepts of Mgmt Accounting is the usefulness and presentation of information and yet the information presented was poorly presented.
Good overview of professional ethics for New York CPAs.
This course was a good refresher. This course is ideal for people not as familiar with accounting. Thank you.
Course was very detailed oriented and had knowledge that needs for accounting and prepare F/S
Informative, interesting and up-to-date. Useful for all employees, particularly for managers.
I really appreciate the CPE surrounding IT risks. Hoping to see more about OT risks in the future ... given IT/OT convergence (standards are: 62443, Purdue and cross-reference to NIST). I am an IT/OT Third Party Risk Manager, and my focus is Operations Tech (large manufacturing). Thank you!
Slides did not cover all necessary information for quiz.
The videos were okay, if you know nothing about technology. The questions were oddly worded and vague. To someone who has participated in an IT audit, they were confusing.
This course provided a thorough representation of Audit Planning. Well done!
the Excellent learning experience.
it really helpful to improve our awareness of security.
It was really good knowledge on knowing about the process and software applications in Information Technology
It's a lomg course. A part A and Part B with separate finals might be better for those who need to take this in multiple sittings.
Good information, helpful. Informative. Learning and interesting. Time Length can be reduced. Liked the course. SDLC was helpful and informative
Excellent course on some basics of Strategic Management. Nice intro for newcomers in the workforce who have not grasped the importance of strategic placement in the market.
The course provides great case examples of principle financial statements analysis and the purpose for the various ratios.
The course provides a great overview of fraud, impacts to the Company, and ways to mitigate that risk and how Internal audit can aid and assist in this process.
This is a very detailed and informative course and clearly set out the differences between both areas.
Good information that should be revisited frequently.
Very informative. Love the structure of the course.
This course provides some great information. The topics covered are very helpful as well.
Very helpful as starting a new position in SOX after coming from Audit
this was a great refresher course; the way the topics were highlighted and then covered in greater detail was a good strategy to ensure understanding and retention. Thank you.
Jim has a great teaching style making it easy to grasp the key concepts for this course. This was a very good refresher for me. Thank you Jim!
its a great course with full of information! i find it useful for me to detect a fraud next time
Good course overall, registration process is bit lengthy, but videos are very informative.
nofreeadsfrommenofreeadsfrommenofreeadsfrommenofreeadsfromme
Great exposure to Fraud Risk Management Strategy. Fraud Risk Monitoring is crucial in today's business environment. Professionals from business and accounting background could make use of the information for professional certification studies and on-job applications. I would definitely keep the notes for future reference.
Informative course where you get know about the Sarbanes-Oxley (SOX) - Information Technology Controls
Course is very helpful and easy to understand .Thank you for providing such course details information
very helpful. I love the way it is explained. It is so handy to understand.
Valuable and practical insights into key considerations for every internal audit function.
Good course. Explained very well. I like the explanation of each topic in so easy way that it is understood to everyone. Thank you for this effort.
The training was very monotonous. May be including some real life examples with question/answer in between would help.
Great introductory course. I liked that the content was not too overwhelming volume wise for the time of the lecture.
The sound quality (changing volumes, frequently clearing throat) detracted greatly from the learning experience.
This was an excellent course because it provided tactical ways to implement the information provided.
Very Educative about internal controls. Got to learn about COSO.
The course is very useful for those risk management professionals who need to rethink their organizational planning efforts.
very effective course that highlights the importance, effectiveness and execution of internal controls
This was a great class that gave me some important tips that I hadnt previously considered. Very useful!
Great information in this course. It was easy to follow along.
Very easy to follow and comprehend. The Financial Reporting to Reporting is a great change since this is a important factor that aligns with all departments not just Finance.
this is very good to me. Ksox control can prevent issue. it was helpful to me how to establish control on our organization.
I learned a lot from this course and will highly recommend it!
The course is well organized with the most up-to-date topic.
ExcelLent :) Well-structured and easy to study Text Based Course. Very useful supporting materials. Interesting info.
the course content is really good and instructor did a great job putting this material in an easily understandable format
Great presentation on internal controls! I would like to course to include more examples of well-designed controls vs. not-so-well-designed controls and control design gaps.
great series of questions. a bit tricky. Internal controls is very vital and crucial to the success of any corporation. Recommended for all companies.
New experience and knowledgeable information shared.
The course was very understanding and useful .Thankyou for the great information.
This is a great course for management level. Recommend strongly to all manager levels.
Course was as expected and CPE credits seemed appropriate
I liked the detailed explanation about AC, GC and EC
It was very well structured, well-paced and easy to follow training course. Structuring the course in segments as well as offering a continuous play option is perfect for any learning style. The examples given were good.
This is a wonderful training program catered to all the software professionals. This is a wonderful training program catered to all the software professionals.This is a wonderful training program catered to all the software professionals.
It is a really good and helpful course. It has appropriate information.
Training was excellent with good interaction.Knowledge sharing is good. Recording facility is excellent for revising.
Great learning experience and strongly I will recommend this course to my collegues to complete
Enter a short review and let others know about this Course.
provided good information in a platform to engage the parties taking the course. Provided helpful ideas and processes..
I learned a ton from this course on the importance of financial controls as it pertains to SOX
Material not specific enough in terms of definitions and concepts.
The Course was very engaging and provided great examples of real life. The instructor is very enthusiastic and content is to the point.
The course gave me the understanding of ITs role in KSOX and the processes that need to be put in place all through the cycle
It was very interesting course. It made me feel how important to build confidence and trust in an organization.
Lengthy but informative. Could be simplified further or make it easier to relate to.
Well explained and more interesting than I expected
Good informative course and liked the concept of the instructor explaining all concepts in detail.
Very helpful even for frequent career excel users.
Very good test, I am now SUPER good at ethics need more words to hit 50
Like everything. Very informative videos. Easy to understand and learn. Truly appreciate the tutor.
This was most difficult course I have ever taken for a company. it was hard to focus in on the questions that might be asked during the final exam because of how much content is covered in the videos.
This course helped me understand the financial impact of IT changes and and how to allign with KSOX controls.
great material for learning or keep current with SOX as well as getting CPE credits.
Content in the course is very informative. It covered all aspects of SOX.
It's Good to learn about the systems which we work on daily basis
Great course to understand KSOX process. This will help us to support the KSOX audit process to evaluate current system falls under KSOX control or not and remediate missing controls.
Concepts should be more simplified. Found little vague to understand
The course is a very useful and good experience for understanding the SOX
The course was complete and efficient. The presenter was extremely bland, not a good fit to lecturing.
content was adequate for the topics pertaining to SOX compliance. Dividing into separate topics is a good idea.
This is a course that provides helpful knowledge for big data analytics and its potential uses in the business and accounting worlds.
This was very helpful and I will definitely save these training materials if our department is ever called on to conduct an audit of the network. Currently we also have an Information Security team that is a second line of defense to our Internal Audit team.
Great course! A very thorough review of internal controls that was easy to understand.
It was good course with lot of clarity, information and simple language for lay man to understand the SOX.
great course and lynn explained the Sarbanes-Oxley (SOX) - Information Technology Controls in a very detailed way
This is very informative. All IT staff must go thru this training.
It is my first class for SOX. Lynn did great job by presenting clear distinctions between different areas/terms and straightforward examples. While, by no means, I understand all materials presented here 100% (I need to review a few more times in order to digest completely to be honest), thank you for widening my views & knowledge.
I wish the course had some interactions with the information throughout the course. Short quizzes or question/answer type interactions would break up the lecture and keep listeners motivated.
Better narration of lesson and better graphics to help students retain the information
All information was good and relevant. I suggest starting off with a humorous slide (if this allowed) to help set a positive tone from the beginning.
Material was fine. Since the course is a bit long and staff may need to take it in sections, I would just suggest mini quiz (just a couple of questions after each couple of section). I did take the review questions up front to gauge where I needed to focus the most in the training. Most people in our company do not have auditing, or sox in their toolkit.
LOVE this class. Jeff explains some great concepts in clear, easy to follow language. It's great that he does it on the screen as he explains it.
this was so hard for me because I'm not in IT. Thanks for experience.
The course was very well formatted and easily absorbed for the student, could have been more visual
I liked how the instructor was clear and easy to understand the concerts she was explaining
Great material, but having to read the document rather than click through course wasn't great for me.
Very informative. I would highly recommend this course for non-auditors.
This course was a bit difficult due to lack of previous knowledge and reading through the course materials instead of instructed lead. Overall, the course was very educational.
Clear and concise information, well organized and with good real life examples provided throughout the sessions. Logical order and nicely broken down by topic.
Contains some helpful information when trying to schedule time with management
This is an excellent course from Lynn Fountain! The real-life scenarios and current event considerations bring life to the topic.
"How should the control environment be viewed by organizations?" <--Based on the expected answer, this question is written extremely poorly & is misleading.
Great deal of practical solutions to enhancing executive presence. Solid examples by the instructors.
Instructor was knowledgeable on the subject. I think this was a good overview but content could be updated, as the importance of IT controls is increasing in our highly-automated world. I think "real world" examples would make the course more relatable and interesting.
The course was adequate but suggest you relook at the questions. The use of not in the questions is very confusing even for the most experienced person. Also your question in the final exam on incentives is poorly worded
Simple, concise, and easy-to-understand summary of segment reporting.
Thank you for another great course that introduced the connection of COSO 2013 and fraud.
KPI section could be more informative in measuring how effective your profile is.
Great course that explains how to use email professionally in today's context.
Very detailed and through SOD examples and controls at the right audience level.
good process close info and helpful for giving things to think about
Very interesting study. Clearly stated and kept my interest
Very comprehensive; great refresher course for me!
I liked this course as I found that it was very informative and a great refresher on all the many methods and ways in which fraud can occur and be prevented as well.
Course was well done. May want to update to reflect learnings from pandemic.
Great course and very well prepared and explained.
A lot to digest! Terms are essential in understanding concepts.
LOTS of good information! So much actually that I am sure that I need to come back to these slides many times to really understand this thoroughly. There are so many things to be taken into consideration. Good templates and examples.
Gave a good overview of SOX related to ITGC. Would have like to gone into more detail on application controls. Overall, good course.
great course, easy to read and follow along the way the text is written
It was very interesting to get perspective from someone who has worked in both external and internal audit. This was a great refresher on what goes into consideration when issuing an audit opinion.
The course was very good and I got a lot out of it; however, the microphone was very distracting. It was not sitting in a good place and would make a noise every time the instructor moved.
Overall course contained very good information and history behind the "why?" we do all the work we do
Thank you so much for this amazing course where I had the opportunity to learn so many interesting things that I will be able to apply in my daily routine.
Well detailed and properly explained concepts on fraud risk assessment. This is a good introduction into Fraud risk assessment and sets the expectations for beginners
Good introduction to TPA for our foreign sub. Gives guidance on where to find more detailed information for specific countries.
questions at end didn't well match topics covered in the course.
i felt that the instructor gave her best effort to capture the new concepts of the standard.
The course is well structured and detailed. The one thing I like about online learning is how convenient it is. I can keep learning as long as I have a device with me. I really enjoyed this class and the format it was presented in. For me, I learn and retain much. I was surprised about how much information I learned about the course.
It was a good course for basic auditing of Active Directory.
Very helpful, however, too much theoretical information, years, reports
The presenter provides plenty of relevant insights on fraud evaluations in a very clear and concise manner
Excellent course with a strong presenter. A course for anyone who wants to understand and develop stronger more compelling presentations and how to deliver them.
Thanks for this in-depth course. The course material is rich and the delivery, very excellent.
I have to admit that I gave up on watching the video within 20 minutes because of the background music...it's really annoying.
Great course on Cyber Security! I highly recommend this course to business professionals looking to get an overview on the cyber security process.
This entire section is new to me and is very technical. This would be helpful if you need to understand the basics of XBRL.
I like the overall pace of the course & clarity of key concepts presented.
Excellent full package on SOX and COSO principles with key template to implement process in the organization.
One of the presentation sections was not included, but rather a repeat presentation of the previous section.
Great course of audit committee effectiveness in the aftermath of 2007
Great content! I really learned a lot about how to apply Excel functions to financial planning & analysis.
Good review course. This was a solid refresher for something I have been away from for some time.
Good course on IT general controls and distinction between general controls and application controls
Excellent advice and insights. I highly recommend for any finance/accounting leader.
Overall great course! I do not have any feedback on how to improve the quality of this course. I thought for an intro course to Yellow Book, the basics were covered effectively.
Awesome course. I finally understand what the Blockchain is and does. Many thanks
This is a great course for understanding the various components of the Balance Sheet!
The final module in this marathon of a course - 17 courses yet it was very well delivered and comprehensive. Job well done as I learnt a lot.
Recommend Audit Engagement Planning as an excellent course.
This instructor courses are always very helpful and are well thought out. I always look for her courses on-line as I always learn something new and interesting from her classes.
This was both relatable and informative. Definitely worth the time.
Provides a good insight into section 404 requirements
The explanation is very clear, straight to the point.
Interesting content, very useful. Plan to implement with staff
Very good and simplified course. It serves as a good refresher for people practicing SOX and ICFR only daily basis but serves as a good basis for people just starting to learn SOX.
I liked the overall review of the different controls. I would not have mind the course moving at a quicker pace.
It would have been helpful to have the slides as a handout. There was a lot of good information covered in this course and it would have been great to have the handouts for future reference.
The course provides a lot of history and information on SEC and PCAOB. I personally believe the course can be more concise.
I thought the course was very helpful. It is well laid out and a lot of good guidance on building overall communication at an executive level.
outdated with 2013 data - don't think FCPA enforcement has increased under Trump
Everything is making sense but I guess what I'm struggling with is how to identify the "differences" between ASC 606 vs previous version. I felt like all the things that you said existed before. I was wondering if there is a summary/table available where I can clearly see the difference in transaction treatment between ASC 606 and the old version.
good review, nice to be back to this online trainings
Very well presented. Easy to understand and follow.
Interesting course, worth enrolling even though CPE credit not available!
This SOX 404 section possess good controls information.
This course helped me strengthen my understanding of IA fundamentals.
Overall good learning material. the XBRL vs SOX was really good learning in a way that shows link between them.
An important aspect that companies forget to look at because cyber attacks are seldomly experienced by them. Great refresher on how to react to cyber attacks
2014 means data and SEC actions are a bit out of date
Simple and very usefulThe simplicity was surprising yet we overlook most of the tasks involved here
Would help to break down example calcs step by step
The material was well organized and easy to understand. this is a great way of completing credits needed for CPE.
Very insightful with some very useful sources of additional information that will come in handy.
Great concise course over protection techniques / controls for Cyber relate risks. I would recommend this course to an entry level IT Audit associate.
good course with good examples listed throughout the course
I thought the questions were less aligned to the information in the slide deck as they have been in other courses.
I have been working in the SOX/404 area of my internal audit department for a number of years and knew a lot of this at a certain (and varying) level/s - this course showed me where I need to focus more and filled in more gaps than I knew I had!
This course was excellent and provided important information that I will utilize in the future.
Excellent overview about temporary differences, very useful examples and exercises
Good, clear explanation of control activities with a more in-depth look at each principle and POF. The concepts are easy to understand with great examples provided.
this was alot of work but the slides and seminars made it much easier
Great overview. Good explanation about different types of controls.
This course provides a good overall view of what composes ethics and what influences it within an organization
I highly recommend this course to anyone working in accounting. The class material is filled with lots of examples. Great class.
Great course specially regarding the differences between application controls and general controls.
Great review of preparing indirect cash flow statement.
The course was very insightful. I will be taking more of these sox related exams.
Includes fraud not just by employee but also by customer. Includes not just cash but also effect on inventory. A good case for decreasing cash transactions.
I was not familiar with XBRL, so this course was very helpful.
This course is full of a lot of technical information. At times I found it hard to follow, but still finished having learned enough to have a reasonable understanding of the topic.
The lecturer gives a very clear lecture. Very well organized material presented. Great exercises to understand ethics.
Great overview and detailed account of the information.
This is a great overview of XBRL - I found it very technical having not covered the topic before but still managed to understand enough to pass the test. Lynn's presentation was clear and demonstrated her expertise in this area.
Too simple. I learned this as a sophomore in college - not necessary once you are a CPA.
Great information! Easy to understand and overall meaningful content....
Lynn Fountain's webinars are concise and thorough. Anyone without experience would get a clear understanding of the subject matter and what's required.
There are no slides for this series that are needed for documentation purposes.
Good information, easy to understand. Overall enjoyed the whole course.
This course is very useful, but difficult to focus on.
Learned some very useful tips
Interesting real life cases.
Hits on all the basics! Good refresher course.
Short albeit good review of T&E expenses.
Great course in understanding the IT and Finance relationship.
Some more error rectification technique may be included in this course.
Great course! I really enjoyed it.
A very interesting topic, another one they don't teach you in school.
Very informative
I would have liked to have more examples and some of the stuff was same as covered in part 1.
Excellent, great summary
Excellent - gave me a good understanding of SOX by providing the history and timeline of the changes.
Great introduction to IS Auditing and it's roles/responsibilities.
I liked that he gave specific rules and guidelines to making a PowerPoint. I think there is more I could learn in this department. The best tool I will take away from this webinar is the 8H Rule.
I liked how he described the materials and helped to explain how non-Financial Managers view this type of data
good review material
I liked the use of real life scenarios to illustrate how revenue accounting can impact the business.
.
Fun and revelating
Excellent course
Good details
Good refresher on SEC Reporting and structure of reports
This is a great synopsis of the IPO process, including the key regulatory considerations and planning elements. I highly recommend this course.
Ask the instructor a question about this lesson