Webinar Details
Course Description
This webinar will examine the purpose, design, and audit evaluation of role reviews within SOX-relevant systems. Participants will learn how role reviews differ from user access reviews, why configurable roles create structural access risk, and how periodic role governance supports effective ICFR compliance. The session explores common role design pitfalls, testing considerations, documentation expectations, and practical red flags auditors encounter. By the end of the course, attendees will understand how to evaluate role review controls for both design and operating effectiveness in a defensible and risk-based manner.
Learning Objectives
- Identify the purpose of role reviews and how they differ from user access reviews
- Evaluate role review controls for design and operating effectiveness
- Identify common role design risks and audit red flags
- Recognize how to document role review results in a way that meets SOX and audit standards
Prerequisites
- None
Who Should Attend
CPAs, accounting/finance professionals who work with audits.
Advanced Preparation
None
Presenter Details
-
Jen Nelson
- Presenter
Jen Nelson, CISA, CIA, is an accomplished IT audit and compliance consultant with more than 17 years of experience, including nine years in Big 4 public accounting. She operates her own consulting practice dedicated exclusively to IT SOX (U.S. and UK) and SOC 1/SOC 2 compliance, where she helps organizations design, assess, and strengthen effective IT control environments across diverse industries and systems.
Jen has successfully guided clients through audits, readiness projects, and control remediation. She also contracts in quality control and training, helping audit teams refine their workpapers and elevate audit quality. Renowned for her clear, practical advice and deep technical knowledge, Jen holds both the CISA and CIA cred...
NASBA Sponsor
-
Encoursa is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: NASBAregistry.org.
Date & Time
CPE
-
Webinars: CPE certificates will be accessible through your dashboard 1 hour after a webinar concludes.
Self-Study: CPE certificates will be accessible through your dashboard immediately after passing the qualified assessment.
For specific instructions on accessing your CPE, please see our FAQ section on our support page.
- Multiple Attendees on Webinars: Each attendee should register separately for the webinar. If more than 1 attendee participated from the same device, please contact us after the event to let us know. For group signups for paid events, please contact us.