This questionnaire helps to assess if the controls are operating effectively within a business unit. To meet the requirements of Sarbanes 404 requiring management attestation, this questionnaire identifies any changes that have occurred or are planned prior to year-end. Preparation and completion of this questionnaire should be shared amongst Business Process Owners and their respective staff members.

Sample questions include: please review the attached documentation; please list any additional key internal controls that you believe exist in your area but have not been captured in the attached risk and control matrix (i.e. How do you control the major activities, output, etc., in your area?)