sox-testing

Generate SOX 404 sample selections, workpaper templates, and deficiency classifications.

1|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/cy-wali/knowledge --skill sox-testing-cy-wali
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sox-testing
Source: https://github.com/cy-wali/knowledge/tree/main/finance/skills/sox-testing
Command: npx skills add https://github.com/cy-wali/knowledge --skill sox-testing-cy-wali

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps audit teams generate SOX sample selections, assemble testing workpapers, and document control assessments to support SOX 404 planning and testing.

Core Features & Use Cases

  • Sample selection planning across SOX controls (revenue, procure-to-pay, ITGC, and financial close) to determine appropriate testing scope.
  • Standardized testing workpapers templates and evidence capture to document conclusions and support conclusions.
  • Deficiency classification guidance with remediation recommendations (deficiency, significant deficiency, material weakness).

Quick Start

Specify the control area and period to generate sample selections and a testing workpaper draft.

Frequently Asked Questions about sox-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I plan SOX 404 testing samples for key internal controls?

SOX 404 testing sample planning involves generating sample selections across key controls like revenue, procure-to-pay, ITGC, and financial close to determine appropriate testing scope for defined periods.

What is the best way to document SOX testing workpapers and control assessments?

Documenting SOX testing workpapers uses standardized templates and evidence capture to record control testing conclusions, supporting both quarterly and annual compliance assessments.

How does deficiency classification work for SOX internal control testing?

Deficiency classification evaluates identified SOX control gaps to categorize them as a deficiency, significant deficiency, or material weakness, providing remediation guidance for each severity level.

Can I use this for quarterly SOX testing or is it only for annual compliance?

This supports both quarterly and annual SOX 404 testing periods, allowing you to specify the control area and timeframe to generate matching sample selections and workpaper drafts.

What control areas are covered when generating SOX sample selections?

SOX sample selections cover key control areas including revenue recognition, procure-to-pay cycles, IT general controls (ITGC), and financial close processes to support comprehensive scope determination.