Internal Control Certification campaign management

Redwood Platform

Internal control certifications help organizations assess and document the effectiveness of internal controls over financial reporting. For example, organizations can use Internal Control Certification Campaigns to support their SOX Section 302 certification process, in which management evaluates internal controls and documents the basis for required financial-reporting certifications.

Internal Control Certification Campaigns provide a guided business process for planning, launching, and monitoring these certification activities. From the Internal Control Certifications work area, authorized users can manage campaigns, view campaign results, and access their assigned certification tasks.

When creating a campaign, you can:

  • Enter campaign details, including the fiscal period, campaign name, start and due dates, description, and unique reference code.
  • Select published internal controls that you can view and explicitly include them in the campaign scope. Use search and filter chips to find controls, and use Scoping Change information when working from a copied campaign.
  • Generate certification task candidates from included controls. When needed, create additional tasks by applying entity, process, framework, or manual context values.
  • Assign campaign stakeholders and certification task participants. Campaign stakeholders can manage campaign access, while assigned certifiers complete only their own tasks.
  • Define certification steps and questionnaire, then launch a campaign immediately or schedule it to begin on a future date.

Campaign owners can monitor campaign and task status, including scheduled, in-progress, overdue, closed, archived, and trashed campaigns. In-app navigation also shows counts for campaigns and assigned certification tasks.

Business benefit

This feature gives organizations a consistent, scalable way to coordinate internal control certifications. It improves visibility into campaign progress and task ownership, supports controlled access to certification evidence and responses, and helps teams maintain a documented process for internal control compliance activities.

Steps to enable and configure

Before creating a new campaign ensure Fiscal Period has defined values because it's a required field in the campaign form. 

  1. From the Fusion Applications Newsfeed home page, open Reference Data and Settings.
  2. Search for and then select Fiscal Period. You can refer to this feature in What's New for additional information: Reference Data management.
  3. If no values exist, click Add.
  4. Define the reference code, period name, start date, and end date. Repeat steps as needed.
  5. Navigate back to Fusion Applications Newsfeed and select Internal Control Certifications module.

Tips and considerations

  • A campaign can be future dated. A daily process changes a scheduled campaign to In Progress on its start date.
  • Only controls explicitly marked Include are used to generate certification task candidates. Controls not explicitly included are excluded from the campaign.
  • When you copy a campaign, the Scoping Change column identifies new, removed, and unchanged internal control records.
  • Generating additional tasks creates task copies for the selected controls and their defined context values.
  • Assigned certifiers can view and submit responses only for their own certification tasks. They can't view other certifiers' responses or campaign details.

Access requirements

Internal Control Certification Campaigns access is controlled through Stakeholders. Users can view only campaigns for which they have explicit authorization. When the All Employees participant group is assigned, users can view the campaigns in the list. Additional actions, including edit and copy, depend on the user's authorization and applicable privileges.

For access details, refer to Risk Management secured record access framework in this What’s New.