Part A
1. Obtain listing of key systemreports being monitored for process being tested by clicking on the """"3.1 Key System Reports""""link on the following webpage:https://wiki.seagate.com/confluence/display/SOX/CM%3A+Certifications
2. Using the report listing obtained from Step 1, determine which reports apply to the process you are testing
3. Inquire of the designated process lead to determine which reports identified have been changed vs. not changed during the testing period. Include the results of your inquiry in your testingworkpapers.
4. Based on your inquiry, obtain the full population of e-mail alerts received during the testing period by the designated process lead notifying them of changes to key reports.
5. Select your testing sample of e-mail alerts based on the """"As Needed"""" sample size guidance.
6. Verify each e-mail alert selected has been signed off and dated as evidence of review by the designated process lead.
7. Verify review occured timely (based on specific timing attribute)
Part B
8. Obtain quartelry summary report (usually screen-shot recived from IT Production team) of all changes made to the applicable report(s) within the quarter.
9. Verify that individual e-mail alerts have been traced back to the quartelry summary report and included in the package and that quartelry summary report has been signed off..
10. If there were no changes to the reports within a quarter and therefore no individual e-mail alerts received, obtain evidence that the quarterly summary was signed off in that acknowledgment."