Companies listed in the US are familiar with the challenging Sarbanes-Oxley Act (SOX) requirements around internal controls. Many aim to satisfy these requirements by reference to the respected COSO internal control framework. Here are our top five areas where, in this sector, internal control deficiencies often arise: 1. Review of assurance reports received from service …