Services
SOX Compliance & ITGC
SOX 404 readiness, testing and remediation — done right the first time.
Overview
For subsidiaries of US-listed groups and companies preparing for a listing, Sarbanes-Oxley compliance is non-negotiable. We bring hands-on experience in SOX 404 key-control testing, IT general controls and deficiency remediation — so your controls are audit-ready and your teams understand why they matter.
When clients call us
- First-year SOX readiness or a newly acquired entity entering scope
- Key controls failing testing or deficiencies reported by the external auditor
- ITGC gaps: user access, change management, segregation of duties
- Control owners overloaded by evidence requests each quarter
What you receive
- 1Scoping, materiality and significant-account mapping
- 2Narratives, RCMs and testing scripts aligned to COSO 2013
- 3Independent key-control and ITGC testing with audit-ready evidence
- 4Deficiency evaluation and remediation support
- 5Control-owner training and evidence playbooks
Our approach
- 1
Confidential briefing
A 30-minute call to understand the situation. NDA available before any detail is shared.
- 2
Scope & proposal
A written proposal with objectives, approach, timeline and a transparent fee.
- 3
Fieldwork
Data analytics, document review and interviews — with minimal disruption to your teams.
- 4
Findings
A concise, evidence-based report and a briefing for management or the board.
- 5
Remediation
Practical support to fix root causes and verify that improvements hold.
Frequently asked questions
Does SOX apply to Romanian companies?
It applies to companies listed in the US and, through consolidation, to their subsidiaries worldwide — including many entities in Romania and the wider CEE region.
Can you act as our independent tester?
Yes. We perform management's testing as an independent function, documented so the external auditor can consider relying on the work.
Related insights
Internal Controls Every Growing Company Needs
Growth exposes weak processes. These eight controls protect cash, data and reputation — without turning your company into a bureaucracy.
SOX 404 Readiness: A Practical Checklist for Subsidiaries and First-Year Filers
Entering SOX scope is a project, not a paperwork exercise. Use this checklist to structure scoping, documentation, testing and remediation.
Segregation of Duties: How to Find and Fix Conflicts in Your Systems
Segregation of duties is the most important preventive control — and the one most often eroded by growth and new systems. A practical guide to getting it right.
Start a conversation
When the stakes are high, clarity is everything.
Tell us what is happening. We will respond within one business day — in confidence.
- Phone
- +40 741 023 808
- contact@kcshub.com
- Location
- Bucharest, Romania