For group heads of internal audit
SOX 404 and co-sourcing for the Romanian entity
You keep the methodology, the audit universe and the risk-control matrix. We provide the local team: fieldwork, Romanian-language document review, deficiencies documented and retested.
60 minutes online with the partner · free, no obligation · written summary within three working days
In brief
- The methodology and the file remain yours
- Documentation in English, in the group's format and rating scale
- Available for calls until 20:00 Romanian time
What we perform
Across the SOX cycle
- Walkthroughs of the processes in your scope, documenting the flow and the control points.
- Tests of design and tests of operating effectiveness on key controls and IT general controls.
- Sampling according to your sampling guidance, not ours.
- Documenting deficiencies, discussing them with the process owner and retesting after remediation.
- Review of contracts and documents in Romanian, where the group team cannot read the source.
We work in your audit platform, with access granted by the group, and in your workpaper templates. You should not have to re-key our work anywhere. The documentation is prepared to support review by your external auditor.
Short answers
Frequently asked questions
Is this outsourcing or co-sourcing?
Co-sourcing. The internal audit function remains yours, together with the annual plan and the reporting to the audit committee. We perform the agreed areas. If you need the function taken over in full for the Romanian entity, that is a separate engagement, on the internal audit page.
Does engaging you affect our external auditor's independence?
We are not part of an international network, so no network conflicts arise. Before accepting, we check whether we provide any other service to the audited entity, and if we do, we decline the work. We can issue a written independence confirmation addressed to your external auditor, before work starts.
Who is responsible for the conclusions?
You do. Directing, supervising and reviewing the work remain with your internal audit function, in line with the Global Internal Audit Standards. We are responsible for performing the work agreed in the contract and for the quality of the documentation we hand over.
Free 60-minute assessment
60 minutes with the partner: find out what to do, and in what order
An online conversation, with no obligation: which requirements apply to your company, from which year, which risks we see and what is worth preparing now. Within three working days you receive a one- to two-page written summary. The summary is not an audit report.
Cătălin MaziluManaging Partner · FCCA, CIA
Online booking
Only available slots are shown, Monday to Friday between 08:00 and 20:00 (Romanian time), at least one day in advance.
Pick a timeYou book through Microsoft Bookings, which opens in a new tab.
Or 15 minutes by phone, no calendar: +40 767 57 31 57, Monday to Friday 08:00–20:00 Romanian time. The partner answers.