A toolkit should enable to assess and evaluate in an effective and efficient manner the effectiveness of a company’s current control framework, document the ‘as is’ situation, provide a gap analysis and set of solutions to close gaps. A normative VAT Control Framework is used as a yardstick for comparison purposes and will indicate how the steps should be taken in an ideal world (gap analysis).
Trust, but verify is a form of advice given which recommends that while a source of information might be considered reliable, one should perform additional research to verify that such information is accurate, or trustworthy. Ronald Reagan
The deliverables should be supportive and in line with company’s overall Sox objectives and in full scope a project has to deliver: