The health of your business requires consideration that a continual over assessment of risks and controls encumbers your resources and leads to unnecessary testing. External auditors need a business case to justify reducing SOX compliance requirements. As the business owner closest to the daily processes of your organization, you are in the best position to build this business case.
“Control Rationalization – The 8 Best Practices” from Claret Partners