iShield GRC ICFR & SOX Compliance vs Resolver Investigations

iShield GRC ICFR & SOX Compliance is a platform for managing SOX 302 and 404 scoping, control testing, deficiency evaluation and executive sign-off. Its scoping tools cover fiscal periods, entities, materiality, accounts, disclosures and mapped assertions, with versioned reasons for scope changes. Teams can build reusable controls, link objectives to assertions, map frameworks and route approvals. Testing covers design and operating effectiveness through walkthroughs, flowcharts, sampling, evidence requests, PBC management, retesting and reviewer sign-offs. Deficiency workflows include severity classification, aggregation, management responses, remediation links and certification exceptions. Certification cycles manage assignments, reminders, sub-certification chains, executive signatures, Audit Committee packages and archives. External auditors can receive scoped read-only access to evidence and audit trails. The AI suite lists control-design suggestions, sample optimization, deficiency clustering, draft narratives, risk prediction and evidence matching. The module states alignment with SOX 302, SOX 404, PCAOB AS 2201, COSO 2013 and COBIT. It is available for self-hosted and web use; pricing is on request.

Resolver Investigations manages an investigation from intake and evidence through findings and resolution in a structured case file. The cloud product centralizes case documents, supports full-text search, and maintains chain of custody. Teams can configure templates, dynamic fields, investigation stages, and event-based assignments. Role-based permissions, automated alerts, and cross-department workflows support collaboration among groups such as legal and HR. AI-assisted text analysis extracts details from case notes and witness statements; dashboards and reports show case trends and performance. Pre-built integrations and an open API can bring security, HR, IT, and external data into a case view. Resolver Mobile supports incident submissions, file uploads, and offline saving for later submission. It currently displays English only and is limited to the Submit trigger and a specific anonymous incident submission form. Listed uses include fraud, workplace misconduct, whistleblower reports, cybersecurity incidents, financial crimes, HR matters, and supply chain irregularities. Pricing is on request and tailored to each organization’s scope, users, modules, and deployment needs.