Best Practices in Continuous Controls Monitoring (CCM)

I just reviewed this webcast again, and it is an excellent case study in increasing visibility and coverage over business risks and automating SOX control testing at Philip Morris International (PMI). 100% coverage, not sample testing. Entirely complementary with a drive to increase and enhance automated controls in SAP.


I was reminded of a story recently and CCM seems a lot like some teenage experiences in many respects.

Everyone is talking about it, not so many are actually doing it and nobody is doing it very well !

Of course, there are some notable exceptions, and PMI is definitely a good one.

This is a great practical case study of making it work in practice. The topic of continuous monitoring has been much discussed over the years, but there are few really good large scale operational examples out there. I have to commend Philip Morris International and their journey and achievements. A very large scale, global consumer goods business, you can hear some of their experiences at

https://event.on24.com/eventRegistration/EventLobbyServlet?target=registration.jsp&eventid=179366&sessionid=1&key=7E47F7A423F54AE0E8AEFC8B269D9AD2&sourcepage=register