Complying with regulations set by the SOX act can be overwhelming for organizations. SOX testing should focus on ... a risk review on the organizations ITGC. Performing an appropriate risk review ...