This section of Protiviti's "Guide to The Sarbanes-Oxley Act" addresses common questions concerning the identification of Sarbanes-Oxley reporting requirements and relevant processes. Some topics covered are: How does management deploy a top-down, risk-based approach to determine the extent to which internal controls should be documented and validated? How are the critical processes identified? And, what role do process owners play?