MacrosLM Audit & Controls
SOX 404(b)  /  ICFR  /  CASE: PEABODY PROPERTIES
AUDIT TEARSHEET · SOX 404(b) CONTROL TESTING · FY2024

Peabody Properties · SOX control testing — year-end results

42 in-scope controls tested across revenue, P2P, payroll, ITGC, and close. 38 effective, 3 deficient, 1 escalated to material weakness candidate.
CLIENT  PEABODY PROPERTIES LLC  ·  PERIOD  FY DEC-2024  ·  SCOPE  ICFR 404(b)  ·  TEAM  MacrosLM Audit
Controls in scope
42
7 business cycles
Effective
38
90.5% pass rate
Deficiencies
3
Process / design gaps
MW candidates
1
Pending audit committee
01SCOPE MAP 02RESULTS BY CYCLE

§ 01Scope and control inventory

Per PCAOB AS 2201, the in-scope control population was identified through top-down risk assessment. Coverage spans 7 transaction cycles plus IT general controls. Frequency mix: 17 daily, 14 monthly, 8 quarterly, 3 annual.
Engagement parameters
Standard
PCAOB AS 2201
Filer status
Accelerated · 404(b)
Materiality
$1.85M · 5% PBT
Pop. materiality
$370K
Method
Risk-based, top-down
Test approach
Inquiry + inspection + reperformance
Period
Roll-fwd Sep-Dec 2024
Controls in scope · by cycle
CycleControlsAutoManualKeyRisk rating
Revenue (rental income)9365High
Procure-to-Pay8264High
Payroll5232Moderate
Treasury & Cash4132Moderate
Financial close7163High
Fixed assets / Real estate4042Moderate
IT general controls5505High
Total42142823

§ 02Test results by cycle

Aggregated test outcomes across all 42 in-scope controls. Pass criteria: zero unexpected exceptions on key controls; deviation rate below 5% on routine controls. Sample sizes computed per AICPA AAG-SAM table.
Control test summary · by cycle
CycleControlsSample sizePassDeviationsRateCycle status
Revenue94058111.1%1 deficient
Procure-to-Pay83607112.5%1 deficient
Payroll5225500.0%All pass
Treasury4120400.0%All pass
Financial close784700.0%All pass
Fixed assets490400.0%All pass
ITGC5753240.0%2 deficient · 1 escalated
Total421,3593849.5%

Of the 4 raw deviations, 1 was determined to be a non-deficiency (single occurrence on a routine control with offsetting compensating controls); 3 are flagged as control deficiencies for management response.