Entity level controls (ELCs) are often difficult to identify and even more difficult to assess.  Soft controls are similar to entity level controls. They do not lend themselves to normal validation processes.  Assessors must often utilize interviews, questionnaires and observations or other unique methods.

Other courses have looked at top-down risk assessment (RA) and discussed ELCs and some methods for assessment. This course delves further into understanding approaches to assessing the design and operating effectiveness of ELCs and soft controls.  We cover methods and alternatives to measuring and assessing ELCs and soft controls.

Information within this course comes from readily available public domain documents and is utilized by the trainer as a supplement for relaying the course content.

Note: The concepts outlined in this course are up to date and relevant in regards to the Sarbanes-Oxley legislation. Although there have not been any changes in the legislative concepts of the law since it’s release in 2002, some aspects of executing the work have evolved. This speaker is preparing a series of courses titled “Sarbanes-Oxley 20 years later”. Those courses can be found individually on the platform and would be beneficial for anyone involved with compliance.

NOTE: The Instructor has created 5 new segments on Sarbanes-Oxley Update - 20 Years Later:
Sarbanes-Oxley Update - 20 Years Later: Accounting Risk Assessment Considerations
Sarbanes-Oxley Update - 20 Years Later: Sourcing Emerging Risks Part 1
Sarbanes-Oxley Update - 20 Years Later: Evaluating Testing Processes
Sarbanes-Oxley Update - 20 Years Later: Sourcing Emerging Risks Part 2
Sarbanes-Oxley Update - 20 Years Later: Examining Fraud Risks

Learning Objectives
  • Explore Hard vs. Soft entity level controls (ELCs)
  • Recognize challenges of evaluating soft controls
  • Explore Methods for assessing soft controls and determining effectiveness
    • Committee of Sponsoring Organizations (COSO)
    • Maturity Model
    • Cause and effect analysis
    • Questionnaires and surveys
  • Discover how to link soft controls to COSO principles and financial statement assertions
Last updated/reviewed: August 26, 2023

Included In Certifications

This course is included in the following Certification Programs:

16 CoursesSarbanes-Oxley (SOX) Certification

  1. Sarbanes Oxley Overview
  2. SOX: Authoritative Bodies
  3. Sarbanes-Oxley (SOX) Standards - Evolution
  4. Information Technology General Controls Primer
  5. COSO 2013 Overview
  6. Sarbanes-Oxley (SOX) Section 404
  7. Sarbanes-Oxley Section 302: ICFR
  8. Sarbanes-Oxley (SOX) And Fraud Sections
  9. Sarbanes-Oxley (SOX) - Top Down Risk Assessment Part 1
  10. Sarbanes-Oxley (SOX) - Top Down Risk Assessment Part 2
  11. Sarbanes-Oxley (SOX) - Entity Level Controls
  12. Sarbanes-Oxley (SOX) Identifying and Documenting Controls
  13. Sarbanes-Oxley (SOX) Testing
  14. Sarbanes-Oxley (SOX) - Assessing Data Impact
  15. XBRL - Connection to SOX 302/404 and Critical Roles
  16. Tools For Sarbanes-Oxley Compliance
77 Reviews (281 ratings)

Reviews

5
Member's Profile
Very well-designed course and provide learner a brief learning about these topics.

5
Member's Profile
This module is an excellent investment for beginners and seasoned individuals! Lynn provides a well organized and detailed training module for entity level controls (ELCs). She compares the latter with soft controls and utlizes several models, including COSO, to assist individuals with identifying, assessing and documenting ELCs.

5
Anonymous Author
Useful techniques were provided to evaluate the soft controls. Understanding the Control Environment for SOX 404 is a value-add that can be applied in operational audits. It's an important body of information that should be kept fresh throughout the year.

4
Member's Profile
This course provides excellent insight with respect to soft controls - what they are, how to identify them, and various testing alternatives. The information was relevant to the current environment and was well presented.

4
Member's Profile
Happy to have a course on ELC and to be exposed to the maturity model. The lecturer is very knowledgeable and can convey the main concepts in a clear fashion. I recommend this course for auditors and internal controllers.

4
Anonymous Author
It was very well structured, well-paced and easy to follow training course. Structuring the course in segments as well as offering a continuous play option is perfect for any learning style. The examples given were good.

5
Anonymous Author
This gave a very good definition of Entity Level and Soft Controls. It discussed the difficulty in evaluating soft controls and suggested several possible methodologies to do so, and the pros and cons of each.

5
Member's Profile
Excellent description of soft vs. hard controls and the importance of having various skills to assess soft controls. The examples provided in the course were good for the subject audience as well.

5
Anonymous Author
I appreciate the effort and resources spent to explain ELC. They are often relegated as easy to determine but due to their subjectivity, they prove to be more difficult than control activities.

4
Member's Profile
Course very good, presented used great examples and make it easier to understand the difference etween soft and hard controls as well as the possible ways of evaluating soft controls

5
Anonymous Author
Entity level controls are always a challenge in any organisations and Lynn has done a fantastic job in ensuring audience of any level of experience and position can understand it.

5
Anonymous Author
Very good source in this area. This is an area I have not critically visited in some time but after this course I feel much better prepared to critically think through this.

5
Member's Profile
Course content was presented clearly. Slides productively contributed to understanding of the material. Instructor is knowledgeable and provides personal experience examples.

4
Anonymous Author
Not one of my favorite courses in the series but necessary to understand the entire concepts. Course is easy to understand with examples provided to enhance the learning.

5
Anonymous Author
This was a very interesting course on some topics that were new to me. I enjoyed how the course flowed and the approach of going through the models comparison slides.

4
Anonymous Author
The course provides a very good discussion of soft controls. The speaker is very knowledgeable. The topics are well organized and the examples are helpful.

5
Member's Profile
A well designed course giving an understanding of various considerations for Entity Level and Soft Controls. I felt that I got value out of this course.

4
Anonymous Author
I was surprised how subjective ELCs can be. I realized there would be some judgment but it's highly subjective and requires a lot of skill to do it well.

5
Anonymous Author
This course provides great overview with respect to soft controls, different models that can be applied for the effective evaluation of soft controls.

5
Member's Profile
It provides a good information about Hard and Soft controls and how they applies. Important board oversight, structures and accountabilities.

5
Anonymous Author
This course discusses how to evaluate ELC's using different models. I really liked the maturity model approach as far as documentation.

5
Anonymous Author
Another great course from Lynn. I would like to see more examples. The material is a little dry but right to the point. Thank you.

4
Anonymous Author
Excellent topic. Integrity is really important in the organizations and its measurement is vital to evaluate the company status.

5
Anonymous Author
This was a good overview of SOX Entity Level Controls assessment. Course content were clear, well explained, and to the point.

5
Member's Profile
Training was very informative and clear. It was easy to understand and the test and exam was directly related to the training.

4
Anonymous Author
This is a refreshing and interesting course. Nothing surprised me. Everyone will learn one or two things from this training.

5
Member's Profile
SOX Entry level Controls were detailed in nature. Maturity model can assist a lot which is meaningful and informative.

5
Member's Profile
I liked the MLA because it is a new area I did not know before.The stages are relatable to organizations growth cycle

5
Member's Profile
I liked that the class provided suggestions for approaches such as the maturity model, cause and effect, and surveys.

4
Anonymous Author
This was a good course, but one the concepts came a littler more difficulty than others. Will revisit down the road.

4
Anonymous Author
This is a great course for those new to SOX concepts, or for those who have forgotten what they learned in college.

5
Member's Profile
Nice overview of the nature of entity level controls and three frameworks that can be used to evaluate them.

5
Anonymous Author
This course was exciting going through. I gained a lot of insight which will prove quite valuable on the job

5
Anonymous Author
This is an excellent session demonstrating some practical tools and techniques of assessing soft controls.

3
Member's Profile
Great course to facilitate online learning. I learned a lot of information that is otherwise unavailable.

5
Anonymous Author
It was a pretty broad overview but the examples of assessing the environment were concise and in depth.

4
Anonymous Author
This was a good course about the assessment of desing of soft controls and entity level controls.

5
Member's Profile
Very good outline of controls that are not as clear cut as other controls that are more prescriptive

5
Member's Profile
Interesting course that provides example and methodology to evaluate entity level and soft controls

5
Anonymous Author
Another good course. Appreciated the insight into how soft controls can be difficult to evaluate.

5
Anonymous Author
This course was excellent and provided important information that I will utilize in the future.

4
Anonymous Author
This is a broad subject and yes, subjective. The webinar provided some new tools for testing.

4
Anonymous Author
Great information on the importance of soft controls and the challenges of evaluating them.

5
Anonymous Author
this course helped me better understand entity level controls and how to assess them.

5
Anonymous Author
This is a very interesting course on entity level controls presented in a clear manner.

4
Member's Profile
This is a good assessment of soft controls by making the comparison of hard controls.

4
Anonymous Author
Another good course. Some of the exam questions are oddly worded. Read them carefully.

4
Member's Profile
Excellenct course on Soft Controls. Very detailed, useful and helpful information.

5
Member's Profile
Good module, well explained and perfect examples that we can apply in our companies.

5
Member's Profile
Very detailed material about ELC's. Important to clarify and fix the main concepts

5
Anonymous Author
Excellent explanation of Soft Controls and how to evaluate, review and implement.

4
Anonymous Author
It was good training and Informative. Thank you for the session and guidance.

5
Member's Profile
A great course on evaluating ELCs and different approaches adopted in doing so

4
Anonymous Author
Great discussion on soft controls and how it can affect an organization's ELC

4
Anonymous Author
Great course for understanding and auditing entity level and soft controls.

5
Member's Profile
Soft controls - the best summary of the topic I have ever seen. Thank you.

5
Anonymous Author
Great course that presents different techniques to evaluate soft controls.

4
Anonymous Author
Please reveal the answers to the questions wrong after passing the exam!!

4
Anonymous Author
organized and detailed information. organized and detailed information.

4
Member's Profile
Great techniques in how to eveualate soft controls which arent tangible

4
Member's Profile
Good information around the maturity models and hard vs soft controls.

3
Member's Profile
Very good course, Its good to have a one presentation rather than many

5
Anonymous Author
Great course review for SOX Entitly Level Controls. Well presented.

5
Anonymous Author
Learnt Objectives, Effective, Sufficient info, Achieved the purpose

5
Member's Profile
Very good course to get an understanding of entity levels controls

4
Anonymous Author
This was an excellent course on Entity Level and Soft Controls.

5
Anonymous Author
This was a good course. I have a soft spot for soft controls

4
Anonymous Author
Great Course of Sarbanes - Oxley (SOX) Entity Level Controls.

4
Anonymous Author
Good to point out these specialities regarding soft controls!

5
Anonymous Author
crucial topic, though usually left without proper attention.

5
Member's Profile
The examples provided are helpful to understand the concept.

3
Anonymous Author
I have completed the course and have no further comments.

5
Anonymous Author
The content is very relatable and easy to understand.

4
Member's Profile
Informative - much much available to comment on this

4
Anonymous Author
Good course on a tough topic - with good examples.

5
Member's Profile
Great presentation of course material

4
Member's Profile
Great Presentation

Prerequisites
Course Complexity: Intermediate

No Advanced Preparation or Prerequisites are needed for this course. 

Education Provider Information
Company: Illumeo, Inc., 75 East Santa Clara St., Suite 1215, San Jose, CA 95113
Contact: For more information regarding this course, including complaint and cancellation policies, please contact our offices at (408) 400- 3993 or send an e-mail to .
Instructor for this course
Course Syllabus
Introduction and Overview
  Introduction to Sarbanes Oxley (SOX): Entity Level and Soft Controls4:53
Entity Level and Soft Controls
  Hard Vs. Soft Controls8:18
  Challenge of Evaluating Soft Controls9:03
  Methods for Assessing Soft Controls5:17
  Integrity 17:35
  Board Oversight 6:09
  Structure 9:46
  Hold Accountable 6:06
  Model Components 10:45
  Requirements - Challenges - Advantages 10:44
  Surveys and Questionnaires 10:46
CONCLUSION
  Course Summary 2:38
Continuous Play
  SOX Entity level and soft controls1:42:01
SUPPORTING MATERIALS
  Slides: Entity Level and Soft ControlsPDF
  Entity Level and Soft Controls Glossary/IndexPDF
REVIEW and TEST
  REVIEW QUESTIONSquiz
 FINAL EXAMexam