Get in Touch
Our teams are on hand to speak or meet with you to discuss how we can assist you with your business or individual requirements. Please complete the contact form below or contact your closest office.
Contact UsA collaborative offering by Reeve CPA and VNC
In today's globalised economy, regulatory compliance is no longer just a checkbox; it's a strategic necessity for building investor confidence and driving sustainable growth.
Reeve CPA, in partnership with VNC, offers comprehensive and customised SOX compliance solutions that help organisations confidently navigate the complexities of the Sarbanes-Oxley Act. With deep regulatory expertise, strong domain knowledge, and a hands-on approach, our teams work together to strengthen your financial controls, enhance risk oversight, and build trust with stakeholders.
With Reeve CPA and VNC as your compliance partners, regulatory obligations transform into strategic enablers, allowing you to stay focused on what matters most: growing your business.
What is SOX Compliance?
The Sarbanes-Oxley Act (SOX), enacted by the U.S. Congress in 2002, is a landmark regulation aimed at protecting investors from corporate fraud and reinforcing the integrity of financial reporting. It sets rigorous standards for internal controls, financial disclosures, and executive accountability, impacting both U.S.-listed companies and their global subsidiaries.
Who Must Comply with SOX?
- Public accounting firms auditing listed entities
- Companies registered under the U.S. Securities Act of 1933 (unless withdrawn)
- All publicly traded companies in the United States and their subsidiaries
- Foreign (non-U.S.) companies listed on U.S. stock exchanges or filing with the SEC
While private companies are generally exempt, certain SOX provisions may apply if they plan to go public, seek institutional funding, or partner with SOX-compliant entities.
Why SOX Compliance Matters
Beyond regulatory adherence, SOX compliance fosters operational integrity, strong corporate
governance, and lasting credibility.
Corporate Governance
Promotes accountability and transparency in financial reporting.
Financial Transparency
Ensures accuracy, completeness, and timeliness in financial disclosures.
Investor Confidence
Builds trust with stakeholders through demonstrable control and compliance.
Robust Internal Controls
Drives continuous monitoring and improvement of financial control systems to mitigate fraud and errors.
The Risks of SOX Non-Compliance
Failure to comply with SOX can expose companies and executives to
severe
consequences:
Financial Penalties
Significant fines may be imposed on both the organisation and individuals.
Legal Liability
Executives (CEOs/CFOs) may face criminal prosecution for false financial reporting.
Loss of Investor Confidence
Non-compliance may result in reduced trust, falling share prices, and constrained capital access.
Regulatory Sanctions
Investigations, enforcement actions, and leadership bans by the SEC or PCAOB.
Operational Disruption
Costly remediation efforts and diverted executive focus from core priorities.
How Reeve CPA and VNC Support Your
SOX Compliance Journey
Our joint team provides end-to-end SOX compliance services, combining practical experience with regulatory insight to build a strong, scalable compliance programme.
SOX Compliance Services
Public Company Readiness — Year One SOX
Establish a structured roadmap to achieve SOX 404 compliance. We help you design a scalable, right-sized compliance programme embedded with leading practices and sustainable internal control mechanisms.
SOX Diagnostic Review
Assess your existing SOX programme to rationalise controls and validate your approach. Our diagnostics draw upon years of experience and current SEC/PCAOB guidance to ensure alignment and efficiency.
Ongoing SOX Compliance
Adapt and evolve your SOX programme in line with organisational changes. We conduct training for executives, process owners, and control owners to embed a strong control culture.
IT SOX Compliance
Evaluate the design and operational effectiveness of IT General Controls (ITGCs), application controls, and systems involved in major technology transformations (e.g., ERP implementations); identify control gaps and optimisation opportunities.
SOX Transformation & Innovation
Accelerate compliance activities through advanced testing accelerators, proprietary data tools, and access to our global delivery and innovation centres – improving precision while reducing cost and effort.
J-SOX Compliance
Our dedicated J-SOX teams support Japanese public companies in meeting the internal control requirements of Japan's Financial Instruments and Exchange Act efficiently and effectively.
Approach to Evaluating Ongoing SOX Compliance
Ongoing SOX compliance is not a one-time activity but a continuous process that evolves with the organization's operations, risk profile, and regulatory expectations. The evaluation process ensures that internal controls over financial reporting remain effective, relevant, and aligned with both business and compliance objectives.
1. Planning & Scoping Review
- Update Materiality Thresholds: Reassess materiality levels based on changes in financials or business structure.
- Entity and Process Scoping: Re-evaluate in-scope entities, locations, and processes based on risk and materiality.
- IT Environment Assessment: Identify key systems and changes in the IT landscape, including new applications and infrastructure upgrades.
2. Control Framework
Validation
- Control Design Evaluation: Review control descriptions and assess if they remain appropriately designed for current risks and processes.
- Risk Control Matrix (RCM) Review: Update RCMs to reflect any changes in process flow, ownership, or risks.
- Control Owner Validation: Confirm whether existing control owners are current and appropriately trained.
3. Testing of Key Controls
- Walkthroughs: Conduct walkthroughs of key processes to validate understanding and identify undocumented changes.
- Operating Effectiveness Testing: Perform sample-based testing on key controls across business and IT functions.
- Frequency and Sample Size Review: Align testing frequency and sample size with risk levels and control frequency.
4. IT General Controls (ITGC)
Review
- Access Controls: Validate user provisioning, de-provisioning, and privileged access.
- Change Management: Review controls around system changes, patch management, and version control.
- Backup & Recovery: Assess data backup, restoration procedures, and disaster recovery controls.
5. Control Deficiency
Assessment
- Identify Control Failures: Document and categorize deficiencies based on severity and potential impact on financial reporting.
- Root Cause Analysis: Investigate causes – process change, human error, lack of documentation, system error, etc.
- Remediation Planning: Work with process owners to define and track remediation activities.
6. Training & Awareness
- Refresher Training: Conduct annual or ad hoc training for control owners and process participants.
- Awareness Campaigns: Promote control mindset and accountability through internal communications.
7. Reporting & Governance
- Internal Reporting: Provide status dashboards and exception reports to compliance and executive leadership.
- Audit Committee Reporting: Summarize key findings, deficiencies, and remediation plans for the board or audit committee.
- External Auditor Coordination: Align testing scope, results, and remediation activities with the external audit team.
8. Continuous Monitoring &
Optimisation
- Automated Controls Assessment: Evaluate opportunities to automate manual controls for efficiency and accuracy.
- Use of Analytics: Apply data analytics to monitor transactions and identify anomalies.
- Feedback Loop: Incorporate feedback from stakeholders, audit findings, and business changes into control improvements.
Why Choose Reeve CPA and VNC
Together, Reeve CPA and VNC bring a unique blend of regulatory expertise, technical depth, and collaborative execution to every SOX engagement. We partner with you across the lifecycle of compliance — from design and implementation to ongoing optimisation — ensuring your programme is resilient, efficient, and future-ready.
Case Study:
A NASDAQ-listed, high-growth SaaS company with global operations engaged Reeve CPA and VNC to conduct SOX 404 testing across key financial and IT processes, focusing on controls within Order-to-Cash, Procure-to-Pay, Record-to-Report, and ITGCs for systems like NetSuite, Salesforce, and internal platforms. The engagement included detailed walkthroughs, RCM validation, testing of over 50 controls, and coordination with external auditors. The team also supported remediation of key gaps such as delays in access revocation and documentation inconsistencies, helping the client strengthen their SOX compliance posture and improve control ownership across their India and U.S. teams.
Our Team
Firm’s Greatest and most valuable asset
Joseph Reeve
Partner
- Joseph Reeve is a Partner in Reeve CPA's assurance practice and is also a licensed CPA in New York.
- Joseph provides audit, compliance & consulting services to a variety of industries. Prior to founding Reeve CPA, Joseph worked in public accounting for 8 years with Anderson in the field of assurance and as a forensic accountant.
- His passion to develop CPA community made him an ongoing advisor to a CPA review course in NY. Joseph has a Bachelor of Science in Accounting and Finance from DePaul University.
- He is a member of the New York Society of Certified Public Accountants (NYSCPA) and the American Institute of Certified Public Accountants (AICPA).
Pratik Dhanesha
Director
- Pratik Dhanesha is a Director in Reeve CPA's Assurance and Tax practice responsible for providing audit, review, compilation service and tax planning & reporting service. Prior to joining Reeve CPA, he served as an auditor for 12 years working with PwC in New York and BDO international in India.
- Coming from a Chartered Accountant background in India and working as a Certified Public Accountant in the USA, he has provided assurance and taxation services to a variety of industries, including Private equity, Chemical, Pharmaceutical and Manufacturing. He is committed to developing effective auditing procedures and is highly proficient in evaluating the efficiency of accounting systems.
- He has a successful track record in Due Diligence involving Buy-side/Mergers. Pratik has a Bachelor of Commerce in Accounting and Finance from Mumbai University. He is a CA(India) and CPA(USA) as well. He is also affiliated with Delaware State Board of Accountancy
Dileep
Partner
- Dileep is a Chartered Accountant with over 17 years of experience, including nearly 9 years with a large audit firm in Chennai. He currently leads a 30-member team, delivering assurance, financial reporting, and compliance consulting services to a diverse client base comprising listed companies, large corporates, and mid-sized businesses across industries such as construction, manufacturing, financial services, healthcare, IT/ITES, real estate, and logistics.
- As the practice leader for assurance and reporting engagements, Dileep has overseen complex audits and financial reporting assignments under various international GAAPs, including IFRS, US GAAP, Japan GAAP, and Singapore GAAP. He has led several GAAP conversion mandates and supported clients in navigating technical accounting challenges and meeting global compliance standards.
- Dileep has also been actively involved in SOX compliance and control testing engagements. He has worked closely with finance teams to ensure appropriate documentation and execution of internal controls, conducted control walkthroughs, tested the design and effectiveness of key controls, and helped clients address deficiencies in line with SOX and ICOFR requirements.
- In addition to his technical expertise, Dileep has worked with start-ups and multinational organizations to streamline finance and accounting systems, improve the quality of financial statements and internal reporting, and manage smooth audit closures.
Vignesh
Director
- Vignesh is a Qualified Chartered Accountant with over 12 years of experience across statutory audits, internal audits, SOX compliance, and virtual CFO services. His expertise spans multiple industries including retail, manufacturing, healthcare, and financial services, with a strong focus on internal controls, financial governance, and business process optimization.
- Vignesh has led numerous engagements involving SOX control testing, including the design, walkthrough, and operating effectiveness testing of key controls in line with PCAOB standards. He has hands-on experience in executing test of controls, preparing and reviewing SOX documentation, and ensuring alignment with ICOFR frameworks.
- Earlier in his career at BDO Dubai, Vignesh led both statutory audits and internal audit assignments, working with large regional and international clients. He played a key role in driving risk-based audit programs, control assessments, and governance reporting.
- He also has significant experience in building Standard Operating Procedures (SOPs) and has developed detailed process documentation and control matrices for key business cycles such as procure-to-pay, order-to-cash, inventory management, and financial close.
- Currently, Vignesh leads assignments focused on risk management, internal audits, SOX control testing, and Accounting outsourcing services. He has also supported clients on M&A transactions, overseeing financial due diligences.
Archanaa
Manager
- Archanaa is a Chartered Accountant with 5 years of experience spanning both Big Four audit and corporate finance roles. She began her career at KPMG, where she was part of the statutory audit team, working with clients across financial services, manufacturing, and consumer sectors.
- She also has exposure to Indian GAAP and IFRS reporting, audit documentation, internal control reviews, and client coordination across complex audit cycles.
- Over the years, Archanaa has built hands-on experience in SOX testing, including performing test of controls, documenting findings, supporting control walkthroughs, and contributing to control effectiveness evaluations.
- She has also supported data migration efforts, particularly during ERP transitions, validating closing balances and ensuring the integrity of migrated financial data.
- Archanaa brings a well-rounded and hands-on perspective to audit and compliance assignments. With a strong understanding of audit expectations, internal controls, and client operations, she is well-suited to manage field-level responsibilities for SOX testing and related control assessments.