Verify the SOX Content Pack in Policy and Compliance Management

task brazil Updated Sep 10, 2026 2 min read verify-SOX-content-policy-and-compliance.md
Raw file servicenow.com

After importing the SOX Content Pack, verify and edit the profile types, profiles, policies, policy statements, controls, policies, indicator templates, and indicators, within the Policy and Compliance Management application.

Before you begin

Role required: Compliance Admin (sn_compliance.admin)

Procedure

  1. Navigate to All > Policy and Compliance > Scoping > Entity Types.

    A SOX Processes entity type is added and is used to generate the SOX profiles:

    • Accounts Receivable
    • Accounts Payable
    • Commissions
    • Equity
    • Entity Level
    • Financial Reporting
    • Fixed Assets
    • General Ledger
    • Human Resources
    • In Scope Application
    • Inventory
    • ITGC
    • Payroll
    • Purchasing
    • Revenue Recognition
    • SAP
    • SDLC
    • Tax
    • Travel and Expense
    • Treasury [Omitted image "SOX-profile-type.png"] Alt text: Profile type record is pictured with the Profiles related list
  2. If using the Kingston SOX contact pack, under the Entity filters related list, a filter is added to query the SOX processes table for the generation of SOX entities.

    [Omitted image "SOX-profile-filter.png"] Alt text: Profile type record is pictured with the Profile Filters Related List

  3. Open an entity to see all the downstream controls.

    [Omitted image "SOX-downstream-controls.png"] Alt text: Profile record is pictured with the Profile Types Related List

  4. Navigate to Policy and Compliance > Policies and Procedures > Policies.

    All SOX policies have been added in the Draft state:

    • Accounts Payable Flowchart
    • Accounts Receivable Standard Operating Procedures
    • Commissions Standard Operating Procedures
    • Entity Level Standard Operating Procedures
    • Equity - Stock Based Compensation Standard Operating Procedures
    • Financial Reporting - Standard Operating Procedure
    • Fixed Assets Standard Operating Procedures
    • General Ledger - Flowchart [Omitted image "SOX-draft-policies.png"] Alt text: List of all policies is pictured
  5. Open a SOX policy record.

    Notice that there is no text in the policy. Create your own policy and initiate the policy lifecycle.

  6. Navigate to Policy and Compliance > Policies and Procedures > Policy Statements.

  7. In the search bar, enter SOX in the Name field.

    Note: The names of all SOX-related policy statements begin with SOX.

    • All the SOX policy statements are created and assigned to SOX policies.
    • The SOX Control Attestation is created and added to the policy statement. [Omitted image "SOX-policy-statements.png"] Alt text: List of Policy Statements is pictured with all Policy Statement beginning with SOX in the Name
  8. Navigate to Policy and Compliance > Controls.

  9. In the search bar, enter SOX in the Name field.

    Note: The names of all SOX-related controls begin with SOX.

    • All the SOX controls are created for each entity.
    • The SOX Control Attestation is added to all controls with no attestation respondents. [Omitted image "SOX-controls.png"] Alt text: A list of SOX Controls is pictured
  10. Navigate to Policy and Compliance > Indicators.

    SOX Control Indicators were added and indicator templates were assigned to them.

    [Omitted image "SOX-indicators-templates.png"] Alt text: A list of SOX Indicators is pictured

Result

For information about the SOX Compliance Dashboard, see SOX Content Pack dashboard and reports.

Parent Topic:Sarbanes-Oxley (SOX) Content Pack

Search documentation
Search document titles and file paths on the brazil branch