SOX-XL Compliance with the Sarbanes-Oxley Act

Sarbox
Section

Regulation 

SOX-XL Compliance

SOX-XL Implementation

302(4)(C)

The signing officers have evaluated the effectiveness of the issuer’s internal controls as of a date within 90 days prior to the report; and

A validation package is available to perform installation, operational and performance qualification testing of the software. CIMCON Software also provides services to execute this validation package as well as to prepare procedural controls to establish and evaluate the effectiveness of spreadsheet internal controls.

302(a)(5)(A)

The signing officers have disclosed to the issuer’s auditors and the audit committee of the board of directors (or persons fulfilling the equivalent function) all significant deficiencies in the design or operation of internal controls which could adversely affect the issuer’s ability to record, process, summarize and report financial data and have identified for the issuer’s auditors any material weaknesses in internal controls.

SOX-XL’s ease of deployment allows quick implementation and robust functionality for designing and implementing internal controls that are adequate to record, process, summarize and report financial data using spreadsheets and facilitate compliance with the Act in a timely manner.

302(a)(5)(B)

The signing officers have disclosed to the issuer’s auditors and the audit committee of the board of directors ( or persons fulfilling the equivalent function) any fraud, whether or not material that involves that involves management or other employees who have a significant role in the issuer’s internal controls.

The system administrator can configure the maximum number of invalid login attempts before the user account is automatically disabled. All record changes are logged to an audit trail with various graphical audit tools. All security related events such as login, logout, account lockout, password change, and unlocking of account are logged into a security audit trail. The system administrator can query the security audit trail using a Graphical Query Builder with filters based on User ID, Event and Date Ranges. Graphical tools to review all activity help in easily detecting attempts at fraud and record falsification. Both User ID and password are required for signatures not executed during a single, continuous period of access.