Back to Services
Service 04
Risk Advisory & Internal Financial Controls
Section 143(3)(i) of the Companies Act requires auditors to report on the adequacy and operating effectiveness of internal financial controls. For Indian subsidiaries of US-listed groups, SOX 404 adds a parallel obligation. We design, document, and test these controls end to end — a service grounded in years of IFC and SOX engagement experience at PwC India.
What We Offer
Our Scope of Work
IFCoFR Framework Design — Entity-level, process-level, and IT general controls
Process Documentation & Walkthroughs — P2P, O2C, R2R, H2R, Treasury, Tax, Inventory
Risk & Control Matrix (RCM) Preparation — Aligned with the COSO framework
Testing of Operating Effectiveness — Independent testing, sample selection, deficiency reporting
SOX 404 Readiness for Indian Subsidiaries of US-Listed Groups
Entity-Level Controls (ELC) Assessment
IT General Controls (ITGC) Review — Access, change, and operations management
Gap Assessment & Remediation Support
Standard Operating Procedures (SOP) Development
Delegation of Authority (DoA) Matrix Design
Why Choose Us
Key Benefits
1
Audit-grade documentation that holds up under group auditor review2
Remediation support — not just gap reports3
SOX 404 readiness aligned with PCAOB expectations4
Reduces likelihood of qualified IFC opinionsCommon Questions
Frequently Asked Questions
Book a Consultation
We'll get back to you within 2 hours