In 2012, Whitehall Management implemented ICE control environment reporting at a major UK Media and Telecoms company. Our client had successfully implemented a SOX-compliant framework in 2004 using an internally developed database to act as a repository and reporting platform. This database provided storage for basic control information and related audit testing results across multiple locations.
Limitations in the technology were placing an increasing burden on the central SOX team and entrenched a mismatch between ownership of, and responsibility for, control environment information throughout the organisation.