Control Environment (CEN) - Normal Controls

Question 1

CEN01

Answer 1

1. Has the company got a copy of the latest WPP Policy Book?

2. Are the relevant sections of the WPP Policy Book distributed to staff as necessary?

Question 2

CEN04

Answer 2

1. Does management adopt a zero tolerance attitude towards fraud - including that committed by staff and also corporately and is this communicated to staff?

Question 3

CEN06

Answer 3

1. If the company has received control recommendations as a result of an external audit have they been addressed?

Question 4

CEN07

Answer 4

1. If the company has received control recommendations as a result of an internal audit or SOX audit, have they been addressed?

Question 5

CEN08

Answer 5

1. Has the RTS policy been communicated to staff?

Question 6

CEN11

Answer 6

1. Is the group policy on related parties included in each employee’s contract or otherwise formally brought to their attention?

Question 7

CEN18

Answer 7

1. Is the Business Risk Map produced by the Operating Company up to date, and is there evidence that the risk map has been approved by the management team?
2. Are there any differences between the mitigating factors on the risk map and those in operation that have been tested through the rest of the work in the SOX testing template, or any risks relating to financial reporting that are not covered by SOX testing?

Question 8

CEN21

Answer 8

1. Are third parties (including suppliers and clients) with whom the company trades made aware of its ethical standards?

Question 9

CEN23

Answer 9

1. Is every fraud or theft communicated to Regional and to Paul Stanley (WPP Internal Audit Director)?

Question 10

CEN32.1

Answer 10

Review Standard Operation Procedures documentation