Continuous Controls Monitoring demo

Key controls tested nightly on their whole population, with cited cases for owners. 1:33

What the demo shows

Always-on testing of key financial and IT controls with cited exceptions for owners

Every monitored key control is a strip on the control pulse: ninety nights of results as a line, and last night's exceptions as dots you can count. Each night a monitoring agent re-runs every test on the whole population through read-only accounts and records the parameters and a fingerprint. For access conflicts a usage checker reads the change documents and logs to say whether the conflict was actually used. A triage agent turns raw exceptions into one case per real cause and applies only approved, unexpired known exceptions. A remediation agent asks the owner with the records, two or three options and a recommendation, and proposes protective actions such as a payment block that run only on the owner's yes. When the owner fixes it, a re-test agent re-runs the control on live data and returns it to green only on a pass; the SOX Program Manager signs off every critical case. Repeat failures go to the SOX lead with the history, and an evidence writer assembles the package the auditor re-performs.

Transcript

  1. Continuous Controls Monitoring tests key controls nightly for SOX teams and owners.
  2. Today, failures surface months later.
  3. A SOX program averages $2.3 million.
  4. The control pulse, 148 controls, ninety nights each, six failing today.
  5. Overnight, ITGC, 12Found and COVAC, can maintain vendors and release payments.
  6. The monitoring agent sites both roles and the ticket.
  7. The usage checker read the logs, never used.
  8. The remediation agent gives Daniel, the owner, three options.
  9. Daniel removes the payment roll with a reason.
  10. The retest agent proves the fix.
  11. IEGC 12 is green.
  12. Elena signs off two people on every critical fix.
  13. Ask or instruct the agents.
  14. They cite and act.
  15. Governance, cited, signed, logged.
  16. The result? Failures found in a day, not at year-end.
  17. Built on Botminds.
  18. Agents, data, screens, and governance on one platform.

Transcribed from the film’s narration. Captions are on the player.