Vantage Capital Partners | FY2025 SOX Certification | 102 In-Scope ITGCs
Flow visualization showing test results → deficiency classification → audit opinion impact. 14 control deficiencies identified; 6 covered by compensating controls; 0 significant deficiencies or material weaknesses.
Spike in Week 6: 23 unauthorized SAP changes pushed by Cloud Engineering team.
| Control ID | Domain | Control Description | Test Status | Exception | Deficiency Class | Owner | Remediation Due |
|---|---|---|---|---|---|---|---|
| CM-003 | Change Mgmt | Emergency change authorization review | Exception | 23 unauthorized changes | Control Def. | T. Chen | 2025-02-15 |
| LA-012 | Logical Access | Quarterly user access review - SAP | Pass | — | — | R. Patel | — |
| LA-019 | Logical Access | Terminated user access revocation | Exception | 3 users active 48h post-term | Control Def. | K. Johnson | 2025-01-30 |
| CO-007 | Computer Ops | Daily backup verification & monitoring | Pass | — | — | M. Singh | — |
| FR-004 | Fin. Reporting | Journal entry approval workflow | Pass | — | — | L. Martinez | — |
| CM-018 | Change Mgmt | Segregation of duties - dev vs prod | Exception | 2 users dual access | Compensated | T. Chen | 2025-02-28 |
| LA-025 | Logical Access | Privileged account monitoring | Pass | — | — | R. Patel | — |
| CO-014 | Computer Ops | System availability monitoring | Pass | — | — | M. Singh | — |
Open prior-year deficiencies by week. All FY2024 findings remediated by Week 7.