what is a sox key control?
It is a control that covers more than one risk or support a whole process execution. It is usually part of entity-level controls or high-level analytic controls. It need to be tested to provide assurance over financial assertions (as part of the SOX Compliance)