CORAA

SOX Control Deficiency Evaluation Worksheet (Word)

Evaluate severity, compensating controls and combined deficiencies, then record the classification, rationale and remediation.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Classifies
CD · SD · MW
Factors
Likelihood · magnitude
Also
Compensating controls
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

Control Deficiency Evaluation Worksheet — ___

Standard / scope: ___ | Period: ___ | Prepared by: ___ | Date: ___

Use one worksheet per deficiency or per group of related deficiencies. Evaluate severity by whether there is a reasonable possibility that a material misstatement would not be prevented or detected on a timely basis, and how large it could be. Classification as control deficiency, significant deficiency or material weakness is a judgement made against the current standard and your methodology.

1. The deficiency

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

Who decides if a deficiency is a material weakness?
Management makes the evaluation for its own assessment, and the auditor evaluates separately where an attestation is required. The decision is a judgement against the current standard.
Related templates

You might also need.

SOX Control Test Workpaper — Design and Operating Effectiveness
Generate a SOX control test workpaper covering walkthrough, design effectiveness, operating effectiveness samp
SOX Risk and Control Matrix Template
Generate a SOX-style risk and control matrix with risk, assertion, control type, frequency, owner and evidence
Internal Audit Report Format in Word — Observations, ATR & Management Response
Free internal audit report format in Word for Indian companies. Observations, recommendations, management resp