InsightsCase Studies
Assurance & Risk AdvisoryExecution Mandate

Case Study: SOX-Aligned Internal Audit for a Japanese Chemical Company’s India Operations

Building documented, testable controls for a Japanese parent company's J-SOX assurance programme

By Pratham Sharma•September 23, 2026•4 MIN READ•Rs 88 Crore
Client & Engagement
Japanese Listed Parent Company Subsidiary
Industry Sector
Specialty Chemicals Manufacturing
Jurisdiction & Geography
India
Practice Leadership
Internal Audit, Risk & Controls Advisory
Mandate Performance Metrics
Annual TurnoverRs 88 CroreAnnual turnover of the Indian specialty chemicals operations.
Intercompany Sales70%Share of revenue generated through intercompany sales to the Japanese parent.
Inventory Under ControlRs 18 CroreSpecialty chemical inventory requiring storage-condition and shelf-life monitoring.
Manufacturing Fixed AssetsRs 32 CroreManufacturing equipment subject to financial reporting and control processes.

Executive Mandate Summary

Northrop Management Private Limited was engaged to conduct a SOX-aligned internal audit of an Indian subsidiary of a Japanese listed chemical company, with a focus on strengthening control design, documentation and evidence required under the parent company's J-SOX assurance programme. The review identified gaps in control documentation and operating evidence across key processes, including procurement, bank reconciliations, inventory and financial reporting. While several controls were being performed, evidence was not consistently dated, signed or retained in a manner that enabled independent verification of control performance. Northrop mapped key financial statement accounts to relevant controls, documented control objectives, owners, frequencies and evidence requirements, and established a quarterly testing methodology using inspection, observation and re-performance. Findings were assigned to control owners with defined remediation and re-testing timelines.

Key Transaction & Governance Challenges

  • •
    The subsidiary performed key controls, but approvals, reconciliations and inventory counts were not consistently documented in a form that could be independently tested.
  • •
    The Tokyo-listed parent required evidence that material subsidiaries had controls that were both designed effectively and operating effectively.
  • •
    Procurement documents had been matched, but there was no dated or signed evidence establishing who performed the control and when.
  • •
    Monthly bank reconciliations existed, but outstanding items older than 30 days were not consistently investigated and documented.

Northrop Execution Architecture & Methodology

1
Northrop analysed the financial statements and identified significant accounts and disclosures, including revenue, inventory, fixed assets, trade payables and intercompany balances. The underlying processes and key controls were then mapped.
2
Each key control was documented through its objective, activity, owner, frequency, system, evidence requirements and testing approach in the parent's Risk and Control Matrix format.
3
Controls were tested each quarter through inspection, re-performance and observation, with samples selected according to control frequency and results documented in the parent's standard workpaper format.
4
Each finding was assigned an owner, deadline and re-test date. Remediated controls were subsequently tested to establish whether the changes were operating effectively.

Executive Mandate Overview

A Japanese specialty chemicals company with Indian operations generating Rs 88 crore in annual turnover required J-SOX-aligned control documentation and testing. The subsidiary had controls in place, but insufficient evidence existed to demonstrate that those controls operated effectively.

The engagement therefore focused on converting informal control activity into documented, testable and repeatable control evidence.

Risk-Based Control Scoping

Northrop began by identifying the financial statement areas carrying significant risk, including Rs 88 crore of revenue, Rs 18 crore of inventory, Rs 32 crore of fixed assets, Rs 12 crore of trade payables and Rs 22 crore of intercompany receivables.

The processes feeding these accounts were mapped and key controls identified for testing.

Building the Risk and Control Matrix

Each control was documented in the parent's RCM format. Documentation covered the control objective, process owner, frequency, system used, evidence generated and the methodology by which an auditor could test operating effectiveness.

Japanese translations of control descriptions were also provided for the parent's internal audit team.

Quarterly Controls Testing

Unlike a one-time annual review, the programme tested controls quarterly. Procurement, bank reconciliation, inventory and other financial reporting controls were tested through inspection, re-performance and observation.

The first cycle identified gaps between control performance and control evidence, including undocumented three-way matching and incomplete follow-up of aged bank reconciliation items.

Verifiable Institutional Outcomes & Value Realized

  • Four quarterly testing cycles created a complete year of documented, tested and evidenced control operation for the parent company's J-SOX programme.
  • The three-way matching process was redesigned with a stamped and dated matching record, allowing performance of the control to be independently verified.
  • An outstanding-item ageing and follow-up log was introduced to strengthen investigation and documentation of long-outstanding bank reconciliation items.
  • The inventory weighing process was upgraded using calibrated equipment, improving accuracy from 96.2% to 97.4%.
P

Pratham Sharma

Director•SOX/J-SOX Controls Testing, Risk and Control Matrices, Internal Audit & Control Remediation
Private Mandate Advisory Desk

Facing a Similar High-Stakes Transaction or Turnaround?

Northrop partners execute buy-side due diligence, fraud forensics, and financial restructuring with strict board confidentiality and unmatched technical rigor across Indian jurisdictions.

Next Documented MandateManagement Consulting

Case Study: Ghost Trainees and Unverified Placements in a Skill Development NGO

A skill development NGO reported that 1,200 youth had been trained and 840 placed in jobs under a programme funded through a ₹1.4 crore CSR contribution. The reported 70% placement rate prompted an independent review of beneficiary records, training delivery, placement claims and programme expenditure. Northrop Management Private Limited conducted a forensic verification covering beneficiary deduplication, attendance records, direct beneficiary calls, employer confirmations, offer letters, salary claims and the underlying financial trail.

View Full Mandate Record