Audits
      Back to home
      1. Help Center
      2. Navigation
      3. Audits

      SOX ITGC

      This article will walk you through the SOX ITGC screen

      Welcome to Scytale's SOX ITGC screen – your centralized workspace for managing IT General Controls in preparation for your SOX ITGC audit. If you're coming from AuditTech, you'll find the workflow familiar but enhanced by Scytale's cleaner layout, smart automations, and flexible filtering.

       

      🧭 Overview of the SOX-ITGC Screen

      The main screen presents a summarized view of all your SOX ITGC controls, allowing you to monitor progress and take quick action.

      What You'll See:

      • Name – Name of the ITGC control

      • System – The system the control pulls data from(e.g., AWS, Google Cloud)

      • Owner – Person responsible for the control

      • Issues Detected – Displays the number of detected issues or shows “No issues detected” when none are found.

      Note: If an issue count is shown (e.g., 3/9), it means 3 issues have been approved out of a total of 9 detected issues.

      • Last Sync – Timestamp of the most recent integration pull

      • Status – Displays either Pending or Approved. A control is marked Approved only after the user submits the control.

      • Download Button – Export the working paper, IPE, or the last approved version

      Download Options:

      Clicking the Download button allows you to download:

      • 📄Working Paper  – Current version of your evaluation

      • 🗂️ All Files (ZIP) – Combined data package

      • ✅ Last Working Paper – Snapshot of the last approved WP.

        Displays the timestamp and approver name.

      Filtering:

      Quickly narrow results by:

      • System, Domain, Status and/or Owner 

       

      🔍 Reviewing a Control: Step-by-Step

      Click on any control to start reviewing each record.

      What You’ll See:

      • Automatically pulled records from connected systems

      • Each record includes relevant metadata

      • Clear identification of issues per record (if any)

      For Each Record:

      • ✅ No Issues Detected – You can approve the record right away.

      • ⚠️ Issues Found – An alert and explanation will appear in the Issues Detected column.
        Example: "User is active while he is terminated in the HR system."

       

      📝 How to Handle Records with Issues

      You have two options:

      Option 1:

      Fix the issue externally, then return and approve the record. 

      It may take up to a day for the platform to refresh and show the new status.

      Option 2:

      Add a Note to the Working Paper to provide relevant context, clarifications, or comments to assist the auditor in reviewing this record or understanding specifics. Then approve the record.


      📨 Submitting a Control

      Once all records within a control are approved:

      1. Click Submit Control

      2. A confirmation message will state:

      “This will capture a snapshot of the control’s current state. You can resubmit later, but only the most recent version is saved.”

      3.    The control status on the main screen will update from Pending to Approved.