This course explores how identifying and documenting controls for Sarbanes-Oxley (SOX) is key to enabling the evaluation of process design. It will also ensure testing processes can be effectively executed. Assessors must have a strong understanding of the types and methods of internal controls. Documentation methods must meet organizational needs.
To identify controls, you must understand the concept of internal control. Internal control is a process designed to provide reasonable assurance regarding the achievement of objectives in the following areas: effectiveness/efficiency of operations; reliability of financial reporting; compliance with applicable laws/regulations; and safeguarding assets. You must also understand the types of control and the various methods of documentation.
Information within this course comes from readily available public domain documents and is utilized by the trainer as a supplement for relaying the course content.
Note: The concepts outlined in this course are up to date and relevant in regards to the Sarbanes-Oxley legislation. Although there have not been any changes in the legislative concepts of the law since it’s release in 2002, some aspects of executing the work have evolved. This speaker is preparing a series of courses titled “Sarbanes-Oxley 20 years later”. Those courses can be found individually on the platform and would be beneficial for anyone involved with compliance.
NOTE: The Instructor has created 5 new segments on Sarbanes-Oxley Update - 20 Years Later:
Sarbanes-Oxley Update - 20 Years Later: Accounting Risk Assessment Considerations
Sarbanes-Oxley Update - 20 Years Later: Sourcing Emerging Risks Part 1
Sarbanes-Oxley Update - 20 Years Later: Evaluating Testing Processes
Sarbanes-Oxley Update - 20 Years Later: Sourcing Emerging Risks Part 2
Sarbanes-Oxley Update - 20 Years Later: Examining Fraud Risks
Prerequisites
No Advanced Preparation or Prerequisites are needed for this course, but completion of the instructor's previous webinars on Sarbanes-Oxley (SOX) may be helpful
Learning Objective
- Explore the types and methods of internal controls.
- Identify controls related to Initiation, Authorization, Processing and Recording.
- Identify the various methods of documentation, and recognize the differences between control narratives vs. control flowcharts.
- Explore how to update and maintain documentation.
Last updated/reviewed: July 22, 2025
(268) Reviews
(259 rating)Very short course and some of the examples were good this course is not as good as other ethics courses I have taken.
Class was good. This course will definitely help me with my job.
Lots of new information on big datas role with fraud detection.
This instructor gave an easy to follow overview of FBAR Issues. We must take into account that 2024 may have some differences such as maximum penalty. But this was a clear and concise presentation of the nuances regarding FBAR and Form 8938 Filings.
Good course on general knowledge regarding internal auditing.
Have to say that this is a good, exhaustive and updated trainning on COSO and anyone can take a nice understanding of the whole picture
Interesting concepts. I wish the first course was still available. I feel like I was missing some pieces.
A good primer for people moving into a leadership position.
Great presentation to understand the importance of HR within the budgeting and planning process of a Company.
I've been using pivot tables for years and still picked up a few helpful hints in this lesson. This is a very useful session for any user.
This was an interesting introductory course into powerBI and its uses
This was an excellent course and I felt like it provided a guidebook for necessary courses of action and reminders for those trying to ascend in his/her careers.
course was well written and the presenter provided good examples
Really great course. Professionally communicated and in an interesting way that provides insight as to the nature of the inner workings of the SEC and public companies in more ways than just accounting.
Great summarized course to understand the basics of a Board of Directors structure
Very beneficial and refreshes some of the details for my role being a second line of defense.
Lynn provided a great overview of the options for documenting controls, narratives or flow charts, as well as the key elements for developing the control documentation. This course would be very beneficial to accounting staff members to educate them on control development.
Liked very much the topic to my next interviewer process. Thanks!
Ethical issues are sometimes downrated, what is not correct. Great presentation.
I like to read the slide decks in the pdf format. The pdfs for this course were not sufficient to learn the content.
It was good overall. Question #2 on the Final Exam has 2 of the same answers as choices.
I loved the subject matter. The exam was extremely difficult in its approach to including multiple answer possibilities. In a couple of places there was room for a judgment call.
Excellent explanations and discussions. Examples were well explained.
perfect course to learn usefull fuctions within excel to help manage data and analysis.
This is a great course. Easy to understand, clear and concise. I recommend it for anyone looking to better understand the controls in the order entry process.
Great information about useful tools. Didn't know there were so many plugins available
This course is a very good material for beginners, but also experienced professionals. It is clearly and accessibly structured with key points brought to attention of the students.
clear course, well structured and explained. It helps a lot to understanding the evolution and how some current practices went live.
Principles of Ethical Team Leadership is an important part of corporate culture. learning the fundamental principles will increase the value of the company and benefit everyone involved
This course was especially helpful to me to find out more about the function of internal auditors as I have recently worked with them.
Well explained and excellent slides for future use. Well explained and excellent slides for future use.
It's hard to distill the entire history of ethical thought down into a 2 hour business course, but I give credit to the instructor for making the effort.
Helpful technical details and presented in a concise, straightforward manner.
I think the instructor does a great job explaining the information and providing good examples.
The excitement of the content combined with the enthusiasm and insight of Mr. Wasny make this course, along with those he presents on AI, the most inspiring and motivational I've experienced on this platform.
very good presentation and helpful and I agree that it will further help me in my work and upgrade my skills and knowledge
Great information, explained in a clear, easy to follow manner.
Enjoyed this course and the additional insights from the instructor. Very clear and concise concepts. Would highly recommend to organizations or individuals needing more insight to the "SOX World".
Course content was clearly presented. Reference materials effectively aided in understanding the content. Instructor was knowledgeable about the subject matter.
I have enjoyed so much this course, which I considered have an invaluable materials and knowledge to use as a permanent reference and to apply in SOX audit duties regularly. Thanks to Lynn for this magnificent and outstanding course because it will help me to achieve my professional goals in my Auditor career :)
it was very intersting to have the contection to the case in Canada.
Very informative course and great experience provided to learners
I enjoyed getting to now some of the automation areas that are being seen across SOX compliant companies.
The course is well organized and easy to understand!
I found the slides to be very interesting. Ms. Louis made the slides very engaging.
Great course on ethical and regulatory considerations for remote employees. This will interest you!
It is a very lengthy topic. I like it but it would be better if can have more detail of each subsection. Feel like it is not enough and wish to have more examples.
Good overview of the financial statements with interesting points. I had never heard of a few pieces of terminology used in the course though, and I have been auditing for years.
I have completed the course and have no further comments.
A great review of what communication really is. Highlights ideas that are not intuitively known.
Pivot tables offer the advantage of quickly summarizing and analyzing large datasets, enabling users to easily visualize trends, patterns, and relationships within the data.
Thanks for the very comprehensive course in understanding expectations under SOX standards.
I liked how the course detailed and explained the traits and skills areas.
I Like the course because I heard the Sox but never work with it. I had some idea what is about but the course give me the all picture of the tool.
The course material explain the full scope of the IT and its relation to controls
good course, explaining in reasonable detail the fraud risks relating to financial reporting.
Exam was helpful in understanding the importance of a top-down risk assessment. Thank you.
not sure I agree with this question and answer: Question: Which of the following is not a disclosure control procedure?
The course provides a good definition of the ERM process overall. It covers many of the same items that I have seen before which was easy to follow; however, what I would like to see are examples of how each of these would be applied in a real business case. This would be helpful to bring it all together.
Interesting class. The final exam comes more from the class than the handouts, would like to see all material in a hand out for reference after the class.
Good overview of professional ethics for New York CPAs.
Very nice summary Very nice summary Very nice summary Very nice summary
This course was a good refresher. This course is ideal for people not as familiar with accounting. Thank you.
The course covers a significant amount of material that is often uncommon such as disposal of divisions and going concern treatments. It's well done and interesting.
Concise review of journals, ledgers and GL. Good use of examples. The PDFs are extremely helpful as I listened to the recording.
Interesting and informative course with relevant information to understand the controllership function. Easy to follow and understand.
Great overview of the COSO and internal control processes/procedures
Amazing course! Very solid material to provide a broad understanding of how Fraud is managed according with SOX.
Great pointers! This class is definitely beneficial. Would take again.
The class was presented in a perfect pace for my learning style. The slides are easy to follow and great for future reference.
I liked the course because it introduces you to a short history of the regulations and how they developed over time.
The course provides a great overview of fraud, impacts to the Company, and ways to mitigate that risk and how Internal audit can aid and assist in this process.
This is a very detailed and informative course and clearly set out the differences between both areas.
Very informative. Love the structure of the course.
Good refresher on basic concepts of identifying controls and documenting them in flow charts and process narratives.
This course provides some great information. The topics covered are very helpful as well.
Excellent course for anyway that want to improve or develop a leadership role.
Jim has a great teaching style making it easy to grasp the key concepts for this course. This was a very good refresher for me. Thank you Jim!
its a great course with full of information! i find it useful for me to detect a fraud next time
I am very happy with the training I received in these modules. I also very much appreciate all the templates and documentation provided in the last module. I know that I will be referring back to this material often in the future.
Enjoyed the course which Is exactly what I was seeking to begin educating myself about SOX and how SOX relates to EA/IA. Thanks for sharing your knowledge and expertise, Lynn!
Great exposure to Fraud Risk Management Strategy. Fraud Risk Monitoring is crucial in today's business environment. Professionals from business and accounting background could make use of the information for professional certification studies and on-job applications. I would definitely keep the notes for future reference.
A lot of material covered but nicely separated by topics.
The sound quality (changing volumes, frequently clearing throat) detracted greatly from the learning experience.
This excellent course helps and encourages to use healthy scepticism to detect cash related fraud cases.
Material was a little hard to understand and retain. I would have liked more clarification
The course is very useful for those risk management professionals who need to rethink their organizational planning efforts.
A helpful, tangible approach on the topic. Judgment and specific company factors play into a conclusion/position. The information within this webinar will be useful.
This was a great class that gave me some important tips that I hadnt previously considered. Very useful!
The speaker demonstrated in-depth knowledge of the subject matter and its implementation. Very balanced overview and a good introduction to the subject matter.
Excellent course, the material and trainer were really clear even for those new in SOX world.
I learned a lot from this course and will highly recommend it!
I really had a hard time with some of the exam questions - they seemed ambiguous and unclear.
The training videos was good and understandable. The PPT presented was clear .
These tools will provide assistance in the development and execution of SOX compliance procedures.
The course is well organized with the most up-to-date topic.
Dislike: The writing of the exam questions aren't as well written as the rest of the courses.
This a trending topic in current industries and gaining more focus for its use cases and utilization. The course provided a good introduction to this topic.
The materials are well organized and good to understand quickly. I found a lot of cases to understand Codes.
I liked that it was helpful in explaining the process for ERM.
It was very well structured, well-paced and easy to follow training course. Structuring the course in segments as well as offering a continuous play option is perfect for any learning style. The examples given were good.
This is an excellent SOX topic that I have not previously seen covered before.
The learning activity was engaging and appropriate. It met my expectations.
Like in other webinars Lynn has, I loved how she goes deep in every slide using examples and/or making great observations for when you are in the process of RA. With that, you can see she is very knowledged in the subject she is teaching about.
This course provided an excellent overview of the risk assessment steps and criteria to complete the process. I especially appreciated the sample documents provided by the instructor. Also, this instructor was very clear, concise and provided very meaningful examples of this topic. She is an excellent communicator. I enjoyed this class and would highly recommend it.
Material not specific enough in terms of definitions and concepts.
The Course was very engaging and provided great examples of real life. The instructor is very enthusiastic and content is to the point.
Great! Thank you for another useful and interesting course. Awesome summary.
The question in the final exam, "Which form of the Efficient market hypothesis suggests that even insider information is priced into stocks:" - the answer should be the Strong form. Instead, upon grading, it chooses the "Equity form" as the correct answer.
It was very interesting course. It made me feel how important to build confidence and trust in an organization.
The course is very informative and covers all necessary topics that are needed to be proficient in the Sarbanes Oxley. I highly recommend this course to individuals who wants to learn and understand SOX.
Very helpful even for frequent career excel users.
Concise content and very helpful considering the global business environment and impact of digitalization driving the increase in fraud incidents.
i thought this was a solid course and i liked the real-world examples because it made the topic more interesting and tangible.
Very informative course. I recommend to anyone, don't have anything else to comment on.
The course was informative and helpful in better understanding in identifying and documenting controls as it relates to sarbanes-oxley. This instructor speaks clearly and gives good information.
This was very helpful and I will definitely save these training materials if our department is ever called on to conduct an audit of the network. Currently we also have an Information Security team that is a second line of defense to our Internal Audit team.
Great course! A very thorough review of internal controls that was easy to understand.
Appreciate the way it was very much helpful to me, thought me well.
Did not understand the section on controversy around Pitt & Webster. Seemed somewhat irrelevant
A good course on ITGC. It has helped me refresh and reinforce my understanding of the topic
This course was a bit difficult due to lack of previous knowledge and reading through the course materials instead of instructed lead. Overall, the course was very educational.
I would have liked a deeper dive on the SOX Testing Process and IT sections. IT was very general and didn't give a lot of specifics or depth. The control testing didn't even mention IPE. Would have liked more guidance on testing specifics. The background, explanation of legislation, auditing standards, COSO, etc were very beneficial.
Contains some helpful information when trying to schedule time with management
Objectives Met, Appropriate requirements, Activties completed
This course was great at educating/refreshing the knowledge of cyber threats and came with a great glossary of terms for reference with easy to understand explanations.
This is an excellent course from Lynn Fountain! The real-life scenarios and current event considerations bring life to the topic.
Helpful information about automating reports in Excel. Recommend.
I enjoyed the examples given in this course. These examples helped to bring all of the concepts that I am learning in the certification together!
Great deal of practical solutions to enhancing executive presence. Solid examples by the instructors.
Very meaningful and informative course gives a very good understanding on standard evolution.
Great overview of COSO 2013 and how management is responsible for their internal controls.
Good refresher course to understand the concept of SOX
I am with a new company implementing a SOX program. While I had experience in SOX previous to this class, these lectures have provided new information, a great foundation, and good real world examples. I will likely be returning to the classes and handouts on a routine basis for guidance.
Very good course, Its good to have a one presentation rather than many
Very Informative. Comprehensive learning. Extensive material provided.
Excellent articulation of COSO 2013 principles that have provided better practical linkage. Only one improvement recommended is to include some more specific examples
Best point: understanding SEC vs PCAOB and AS2 to AS5
Thank you for another great course that introduced the connection of COSO 2013 and fraud.
The tools (resources, downloadable material) in this are incredibly valuable - a great conclusion for this certification program.
This was an excellent and engaging course. It gave a simple, but wholistic introduction to the Sarbanes Oxley Act. Looking forward to watching the remaining courses in the certification.
This was the best section in my opinion. It really pulled together the details of each area discussed! The samples and explanations were easily understandable. This section has me feeling more confident!
Very interesting study. Clearly stated and kept my interest
Good information and references. Would recommend this course to others.
I liked this course as I found that it was very informative and a great refresher on all the many methods and ways in which fraud can occur and be prevented as well.
Your courses have all been so wonderful, so informational, and so thorough--in short, greatly appreciated by me! Thank you for sharing your expertise, your wealth of knowledge, your inclusion of examples! I have greatly enjoyed reading and listening to all of your lectures thus far.
Great course and very well prepared and explained.
Good review of various types of audit reports that can be issued. However, this course did not cover the dating of the report or the auditor's responsibilities for reporting of subsequent events.
A lot to digest! Terms are essential in understanding concepts.
LOTS of good information! So much actually that I am sure that I need to come back to these slides many times to really understand this thoroughly. There are so many things to be taken into consideration. Good templates and examples.
great course, easy to read and follow along the way the text is written
It was very interesting to get perspective from someone who has worked in both external and internal audit. This was a great refresher on what goes into consideration when issuing an audit opinion.
Overall course contained very good information and history behind the "why?" we do all the work we do
Thank you so much for this amazing course where I had the opportunity to learn so many interesting things that I will be able to apply in my daily routine.
The course was beneficial to learning about control deficiencies and how to properly assess them for a material weakness.
Segregation of duties: one of my favorite topics in audit. This is definitely a much harder concept to implement in smaller companies where staff are limited.
Well detailed and properly explained concepts on fraud risk assessment. This is a good introduction into Fraud risk assessment and sets the expectations for beginners
i felt that the instructor gave her best effort to capture the new concepts of the standard.
This course provides a good understanding of fraudulent disbursements.
Very helpful, however, too much theoretical information, years, reports
The presenter provides plenty of relevant insights on fraud evaluations in a very clear and concise manner
Great comparison between COSO 1992 and 2013. The instructor is very knowledgeable and shares relevant information
Excellent course with a strong presenter. A course for anyone who wants to understand and develop stronger more compelling presentations and how to deliver them.
Thanks for this in-depth course. The course material is rich and the delivery, very excellent.
I enjoyed this course as it discusses the importance and use of data analytics as it is the future of auditing.
This was a course on Internal Controls! More words are needed to make it informative to my peers.
This was a very confusing one. I finally passed when I answered one question which seemed again what the material and I understood. It was question six. I disagree that it should be answer A. A going concern is considered when a company has issues about going a year from the opinion letter date.
This course is relatively political for accounting and finance professionals. Giving a few examples of politicians or politically linked business leaders isn't necessarily the best way to present ethical issues. Climate change also isn't necessarily an imminent concern for accounting and finance professionals.
Great addition to illumeo. Really helps keep up with the Ethics requirement in a timely manner.
This entire section is new to me and is very technical. This would be helpful if you need to understand the basics of XBRL.
Excellent full package on SOX and COSO principles with key template to implement process in the organization.
This was a good refresher course on financial statement basics.
Great course of audit committee effectiveness in the aftermath of 2007
Good review course. This was a solid refresher for something I have been away from for some time.
Excellent advice and insights. I highly recommend for any finance/accounting leader.
This course provided a good high level overview of how to conduct a risk assessment for SOX.
Awesome course. I finally understand what the Blockchain is and does. Many thanks
This course had lots of information but was a little hard to follow. I was not familiar with the ISO 31000 so I liked being able to see the comparison with COSO.
Training audit tests on specific examples will always help you learn the material more accurately.
The final module in this marathon of a course - 17 courses yet it was very well delivered and comprehensive. Job well done as I learnt a lot.
This is one of the most useful courses I have ever taken. Thank you for the helpful fixes to so many of the common problems we face in managing our inboxes.
Great overview of SOX. look forward to other detailed modules.
This instructor courses are always very helpful and are well thought out. I always look for her courses on-line as I always learn something new and interesting from her classes.
This was both relatable and informative. Definitely worth the time.
Provides a good insight into section 404 requirements
The explanation is very clear, straight to the point.
Very good and simplified course. It serves as a good refresher for people practicing SOX and ICFR only daily basis but serves as a good basis for people just starting to learn SOX.
I liked the overall review of the different controls. I would not have mind the course moving at a quicker pace.
Great course and instruction. Learned a lot about Cyber Security
I thought the course was very helpful. It is well laid out and a lot of good guidance on building overall communication at an executive level.
outdated with 2013 data - don't think FCPA enforcement has increased under Trump
Everything is making sense but I guess what I'm struggling with is how to identify the "differences" between ASC 606 vs previous version. I felt like all the things that you said existed before. I was wondering if there is a summary/table available where I can clearly see the difference in transaction treatment between ASC 606 and the old version.
good review, nice to be back to this online trainings
Very well presented. Easy to understand and follow.
This SOX 404 section possess good controls information.
great video, would recommend for anyone who is interested or wants to gain a high-level understanding of process documentation
This course helped me strengthen my understanding of IA fundamentals.
Overall good learning material. the XBRL vs SOX was really good learning in a way that shows link between them.
An important aspect that companies forget to look at because cyber attacks are seldomly experienced by them. Great refresher on how to react to cyber attacks
Simple and very usefulThe simplicity was surprising yet we overlook most of the tasks involved here
well thought out and acceptable for cpe review purposes
Very insightful with some very useful sources of additional information that will come in handy.
Great concise course over protection techniques / controls for Cyber relate risks. I would recommend this course to an entry level IT Audit associate.
good course with good examples listed throughout the course
I thought the questions were less aligned to the information in the slide deck as they have been in other courses.
This course provides a detailed materials on preventing and detecting fraud.
Very well spoken and concise summary of the major updates
I have been working in the SOX/404 area of my internal audit department for a number of years and knew a lot of this at a certain (and varying) level/s - this course showed me where I need to focus more and filled in more gaps than I knew I had!
Nice and simple overview (for us non-IT folks) of how blockchain can be applied to the enterprise.
This course was excellent and provided important information that I will utilize in the future.
Excellent overview about temporary differences, very useful examples and exercises
I now know the power of the pivot table! Highly suggested for those who want to learn the basics on how to use and create a pivot table.
Good, clear explanation of control activities with a more in-depth look at each principle and POF. The concepts are easy to understand with great examples provided.
This course covers addressing risk based auditing approach for an internal audit team within an organization.
I would recommend this course for everyone. This is basic fundamental information that everyone should know.
This course provides a good overall view of what composes ethics and what influences it within an organization
I highly recommend this course to anyone working in accounting. The class material is filled with lots of examples. Great class.
Great course specially regarding the differences between application controls and general controls.
Great review of preparing indirect cash flow statement.
great class, easy to use, material presented well, very organized, key points listed for every subject
This was well detailed while providing very efficient timely lessons of the general topic.
Great real world examples to help drive home the point that fraud is a real and continuing risk that we need to deal with as auditors.
GREAT synopsis for documenting internal controls. This course really refreshed some points that I am pursuing in my organization.
The course was very insightful. I will be taking more of these sox related exams.
Includes fraud not just by employee but also by customer. Includes not just cash but also effect on inventory. A good case for decreasing cash transactions.
Great material, effectively presented and well organized.
I was not familiar with XBRL, so this course was very helpful.
This course is full of a lot of technical information. At times I found it hard to follow, but still finished having learned enough to have a reasonable understanding of the topic.
Good insight in personalities and leadership. Excellent explanations of human behavior
Highly recommended this course for auditors learning to look for fraud gaps and analyzing organizational controls.
Good exercises and broad coverage of the 5 step model
Great course that makes me want to read more about the topic.
This is a great overview of XBRL - I found it very technical having not covered the topic before but still managed to understand enough to pass the test. Lynn's presentation was clear and demonstrated her expertise in this area.
There is no correct answer for question #3. Can you double check this?
I found this presentation to be insightful as well as informative. I appreciated the presenters approach to the subject. She was able to present the information with a personal approach. She provided realistic tools for success instead of buzz words and trite "solutions".
Great information! Easy to understand and overall meaningful content....
Lynn Fountain's webinars are concise and thorough. Anyone without experience would get a clear understanding of the subject matter and what's required.
Program materials were relevant and contributed to the achievement of the learning objectives.
This is the only course I have ever done on Illumeo that does not have a continuous playback option. The lack of this option combined with the bifurcation of the slides and the examples into a separate documents makes this course harder to follow that most other courses.
Good information, easy to understand. Overall enjoyed the whole course.
Simply the best instructor I have found on Illumeo. Extremely thorough, technical and practical.
A useful and technical course topic which was presented in a clear and concise manner.
Very informative course that I will definitely utilize in future audit engagements in my career.
Acceptable for a general quick overview, but not useful to assist in implementation of any of the concepts.
like this class a lot
Very concise and to the point information.
Interesting real life cases.
Short albeit good review of T&E expenses.
Some more error rectification technique may be included in this course.
Excellent course for finance professionals.
Great course! I really enjoyed it.
ok
A very interesting topic, another one they don't teach you in school.
I really appreciate the examples, thanks!
Very informative
I would have liked to have more examples and some of the stuff was same as covered in part 1.
Course is easy to use and the instructor was very knowledgeabe. Also the material was easy to follow and kept me engaged while the instructor went through the course.
Excellent - gave me a good understanding of SOX by providing the history and timeline of the changes.
Good overview of 606.
This is a very detailed and informative course. I really enjoyed it.
Great introduction to IS Auditing and it's roles/responsibilities.
good review material
.
Excellent course
Good details
Bullet points - not the entire conversation or presentation - Please!!!!
This is a great synopsis of the IPO process, including the key regulatory considerations and planning elements. I highly recommend this course.
The course was excellent. It met my expectations.
Ask the instructor a question about this lesson