Internal Control Testing
We help organizations test the design and operating effectiveness of internal controls across business processes, applications, and IT environments. We also work with organizations evaluate the quality and sufficiency of their documentation so that they can successfully complete audits of their controls. If issues related to the design or operating effectiveness of controls are found, we help our clients identify and implement changes to correct the issues.
Sarbanes-Oxley (SOX) Control Testing and External Audit Support
We perform testing of business process controls, application controls, entity-level controls, and information technology general controls to help management evaluate the effectiveness of their internal controls over financial reporting. This testing supports management’s SOX assertions.
We work collaboratively with external auditors to increase the overall efficiency of testing, coordinate meetings so there are less meetings for our clients, coordinated requests which avoids duplicate requests or removes the work of delivering on two separate sets of requests and reduces audit fatigue. We deliver high-quality testing and documentation, and it is often relied upon by external auditors, which can result in lower external audit fees. We help our clients improve their audit readiness, reduce rework, and lower the level of effort required during the audit process.
System Implementation Control Reviews
System implementations can introduce new or different risks that existing controls may not entirely mitigate or cause failures that affect both operations and compliance. We perform control reviews during implementation and post-go-live periods to help organizations identify the need for new controls and correct issues quickly to reduce disruption. We provide practical recommendations to strengthen control environments, improve compliance, and support more effective operations.
Data Analysis
We use data analysis to support control testing, identify unusual activity, and highlight transactions or trends that may indicate control issues, process breakdowns, or potential fraud.
Our work can be performed with any structured data source, often including accounts payable and disbursements, employee time and expense activity, journal entries, credit card transactions, payroll, human resources data, vendor activity, inventory, user access, and other operational data.
These procedures help organizations improve the efficiency of control testing, improve visibility into risk, identify opportunities to improve controls and protect assets.
AI Assisted Control Testing
We utilize AI to increase the efficiency of control testing where appropriate. All of our testing, including AI assisted control testing, is subject to our rigorous quality control review process.
Where We Add Value
Organizations typically engage Behunin & Associates when they need to:
- Verify the design and operating effectiveness of internal controls
- Support SOX compliance and ICFR testing
- Test business process controls, IT general controrls and application controls
- Review controls during a system implementation
- Strengthen audit readiness and documentation
- Identify control deficiencies and support remediation
- Use data analysis to improve testing and identify exceptions
Systems and Software Experience
Our team has experience testing controls across a wide range of computer systems and IT environments including the following:
ERP and Financial Systems
- SAP, Oracle, NetSuite, PeopleSoft, JD Edwards, Great Plains, Intacct, QuickBooks, Sage, Softrax, Microsoft Dynamics, Yardi, Priority ERP
HR, Payroll, Time and Expense, and Workforce Systems
- ADP, Ceridian, Kronos, Paychex, PrimePoint, Fidelity Payroll, Workday, SuccessFactors, myTime, Concur
GRC, Audit, and Compliance Tools
- AuditBoard, Workiva, Fieldguide, insightsoftware, One Trust, LogicGate
Cloud, Infrastructure, and Operating Environments
- AWS, Azure, Citrix, IBM, Linux, UNIX, Solaris, Windows Active Directory, Oracle and SQL databases, Puppet, Splunk
Identity and Access Management and Security Tools
- CyberArk, Centrify, Forefront Identity Manager, Sailpoint, VCM
Reporting, Analytics, and Operational Systems
- Cognos, QlikView, Coupa, Manhattan WMS, Oracle WMS, CommerceHub, ComputerShare, Snowflake
Why Behunin & Associates
We bring practical experience to internal control testing and SOX preparedness. We are dependable advisors who partner with management to advocate for management while working with external auditors. This helps your organization evaluate control performance, improve documentation, support audit requirements, and address issues in a way that is thorough, efficient, and aligned with how your business operates.