Sparrow, Johnson & Ursillo incorporates all relevant testing and assurance services to address SOX 404. Identification, documentation, testing and monitoring of general and key controls will be performed based on guidance received from the "IT Control Objectives for Sarbanes Oxley" issued by the IT Governance Institute, CobiT, ISO 17799, and other best practices.