top of page

Sarbanes-Oxley (“SOX”) & Risk Advisory Services

Bullpen teams approach SOX compliance collaboratively and efficiently.  As a preferred 2020 Control implementation partner, we bring a battle tested web--solution designed specifically to facilitate SOX readiness and continued compliance and highly qualified industry consultants.  Alignment with our customers’ auditors ensures maximum leverage in the areas of risk identification, controls documentation and testing protocol.

Our engagement teams are fully capable in all aspects of SOX compliance including:

  • COSO 2013 framework principles and points of focus

  • Account and process specific risk identification

  • Fraud risk assessment

  • Business and information technology process mapping & flows

  • PCAOB level documentation including Information Provided by the Entity (“IPE”) and Information Used in Control performance (“IUC”) and validation thereof

  • Key report base lining & logic testing

  • SOC & SSAE16 risk and control integration

Bullpen’s other Risk Advisory services are tailored to meet the specific needs of our clients and leverage our collective expertise in the areas such as:

  • Enterprise Risk Management (“ERM”)

  • Co-Sourced & full Out-Source Internal Audit

  • SOC1 and SOC2 compliance readiness on behalf of our service provider customers

  • COBIT, NIST and other standard controls framework compliance

bottom of page