SOX internal audit issue tracking sheet and committee reporting deck — "Audit committee hearing stale remediation dates because the spreadsheet was not updated"
Why the manual spreadsheet breaks financial controls and how a deterministic workflow replaces it.
Internal-audit findings and remediation dates live in a tracking sheet that is copied into the audit-committee deck, so status is whatever the last editor typed.
The committee hears stale close dates because the sheet was not refreshed, and overdue findings look current.
Finding remediation hub that stores each deficiency with an owner, due date, and evidence log, and publishes committee status only from verified items.
Status assertion: a finding cannot report as closed unless a verification artifact is attached, and overdue items cannot be omitted from the committee extract.
Three-stage comparison between manual workbook reconciliation and automated rule-based execution.
SOX findings copied from a tracker into the audit-committee pack.
The committee hears closed dates that the evidence log cannot support.
Committee status publishes only from verified deficiencies with artifacts.
A finding cannot report closed without an artifact, and overdue items cannot be dropped from the extract.
Adjacent spreadsheet failure modes in the same APQC Category 9 process group.
Quarterly IT general controls & segregation of duties audit folder
External-audit PBC tracker and control-evidence binder
Control-owner RACI workbook and SoD conflict log
Scope the replacement architecture for manual consolidation of internal audit deficiency remediation statuses or combine multiple failure modes in the directory.
