Entity Level Control Testing
The latest PCAOB guidance makes the Entity level testing the starting point for Sox compliance. I haven't found the existing software to be that useful, but we preferred to create out own in the Internal audit Department at my company. we used the tool from www.arc.executiveboard.com to guide us.
other guidance to use