This document establishes guidelines and standards for the preparation and review of work papers related to the Sarbanes-Oxley Act (SOX) Section 404 compliance project. These work paper standards will be used to document the results of testing key control activities for all critical business processes identified by the 404 project team.

Work papers must be prepared and reviewed in accordance with the Standards for the Professional Practice of Internal Auditing (Standards) and related practice advisories. In addition, internal auditors should base conclusions and engagement results on appropriate analyses and evaluations.