• Home

• Industries
  • Financial Services
  • Government
  • Healthcare
  • Higher Education
  • Legal
  • Public Companies
  • Public Utilities
  • Retail

• Solutions
  • IT Audit Services
  • IT Risk Assessment Services
  • IT Security Planning
  • PCI Compliance Services
  • Application Code Review
  • Vulnerability Scanning
  • Penetration Testing

• News & Events
  • Events
  • Webinars
  • In The News
  • Press Releases

• About Us
  • Overview
  • Management
  • Partners

• Careers

• Contact Us

Sarbanes-Oxley (SOX404)

The Sarbanes-Oxley Act (SOX), principally Section 404, is one of a rapidly developing set of regulations covering public companies and mandating increased corporate accountability and improved financial data safeguards. Compliance can be complex; new controls must be designed, implemented and validated for effectiveness through periodic independent audits.

Coalfire reduces the cost and complexity of SOX compliance by documenting SOX controls with developing test scripts to accelerate the audit process. Our SOX services have been used by public companies nationwide served by national and regional financial audit firms. Coalfire's SOX service is based on a compliance framework of assessments and remediation advice aligned to guidance from COSO and COBiT best-practices.

Whether your company is preparing for a SOX audit, developing a best-practice IT governance program or responding to a computer compromise, Coalfire can help. We guide the creation of a transparent, centralized IT security controls environment that provides understanding for management and IT staff, minimizes cost, and streamlines the audit process.

"SOX in a Box" for Small Businesses

Coalfire has designed a SOX404 reporting solution for small businesses and other non-accelerated filers. The solution includes templates and control narratives for most small business environments. The streamlined process is less disruptive and extremely cost effective.

IT General Controls Review

Regardless of company size, all organizations must protect the confidentiality, integrity and availability of sensitive data to include human resource, customer data, and financial records. We offer a wide range of IT security and control design advisory services to establish a measurable control framework and we conduct process and technical testing to measure control effectiveness.

If your data is a critical company asset, find out how those assets can be secured and how your company can provide transparency of security and privacy protection to senior management and your Board of Directors.

SAS 70 Reports

As a public company, controls are shared across an enterprise platform that may include service providers. The entire service platform must adhere to risk-based controls to protect the confidentiality and integrity of data. Coalfire offers SAS 70 Type I and II reports through our partnership with an AICPA-registered firm on a cost-effective basis.