financial statements scoping and risk assessment, documenting and designing SOX processes and controls, controls testing... and maintenance of SOX controls including business process controls design, policies, procedures, documentation, evidence evaluation...