CORAA

SOX Entity-Level Controls Assessment (Word)

Assess control environment, risk assessment, communication and monitoring controls at the top of the organisation.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Covers
COSO components
Affects
Testing scope
Evidence
Seen, not just stated
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

SOX Entity-Level Controls Assessment — ___

Scope / period: ___ | Prepared by: ___ | Reviewed by: ___ | Date: ___

Assess the controls that set the tone for the whole organisation. They are often framed using the COSO Internal Control framework; check the current edition and the company's methodology.

A "No" in this area can affect how much testing is needed elsewhere. Record the effect on scope and on the deficiency evaluation.

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

What are entity-level controls?
Controls that operate across the organisation, such as the code of conduct, board oversight and monitoring. Weak ones can affect how much testing is needed elsewhere.
Related templates

You might also need.

SOX 404 Scoping Memo
Generate a SOX 404 scoping memo covering benchmarks, significant accounts and assertions, locations and servic
SOX Risk and Control Matrix Template
Generate a SOX-style risk and control matrix with risk, assertion, control type, frequency, owner and evidence
Whistleblower / Vigil Mechanism Review Checklist — Section 177
Free whistleblower / vigil mechanism review checklist. Tests Section 177(9)-(10) Companies Act compliance — po