This is a sample concluding memo documenting a company’s testing strategy for Year Two SOX compliance. This memo focuses on the test strategy for manual and automated (application) business process controls including entity-level controls. This includes sample size guidance and validating the testing strategy with external auditors.