In Part 1 of this post, we tried to better define just what Management Review Controls are and looked at some examples. The next step is to develop a process to identify and document your organization’s management review controls (MRCs).
The process for identifying and documenting management review controls (MRCs) can be extremely challenging for many companies. It takes significant resources and focus to initially implement. If done properly though, it can return substantial value, helping you to better evaluate the controls within your Sarbanes-Oxley compliance program and serving as an important roadmap in the event of employee turnover. In Part 1 of this post, we will see if we can better define exactly what qualifies as MRCs.