Company: NOTV
Filing Date: 2025-05-08
Form Type: 10-Q
Source: 0001628280-25-023370
Chunk: 98

Company: Inotiv, Inc.
Filing Date: 2025-05-08
Form: 10-Q
Item: Part I, Item 1
Chunk 98
---
 the consolidated financial statements throughout the year ended September 30, 2022, which resulted in ineffective business process controls (automated and IT-dependent manual controls) that could result in misstatements potentially impacting all of the financial statement accounts and disclosures. Specifically, management did not design and maintain: sufficient user access controls to ensure appropriate segregation of duties and adequately restrict user and privileged access to financial applications, programs and data to appropriate Company personnel; and program change management controls to ensure that information technology (“IT”) program and data changes affecting financial information technology applications and underlying accounting records are authorized, tested, and implemented appropriately. As a result, business process controls (automated and IT-dependent manual controls) that are dependent on the ineffective ITGCs, or that use data produced from systems impacted by the ineffective ITGCs were deemed ineffective at September 30, 2022, and were not remediated and therefore remained ineffective at March 31, 2025; and

b)Management did not have an adequate process in place to design and test the operating effectiveness of internal control over financial reporting in a timely manner or an adequate process in place to monitor and provide oversight over the completion of its assessment of internal control over financial reporting. As such, we determined that management did not effectively design and implement components of the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework) (COSO 

52

framework) to address all relevant risks of material misstatement, including elements of the control environment, information and communication, control activities and monitoring activities components, relating to: (i) providing sufficient and timely management oversight and ownership over the internal control evaluation process; (ii) hiring and training sufficient personnel to timely support the Company’s internal control objectives; and (iii) performing timely monitoring and oversight to ascertain whether the components of internal control are present and functioning effectively. As a result, controls relevant to all business processes and related controls (including relevant entity level controls) were deemed ineffective at September 30, 2022, and were not remediated and therefore remained ineffective at March 31, 2025.

As of the date of this report, Management has updated the design of several controls and modified process designs in an effort to improve our internal control over financial reporting and remediate the control deficiencies that led to the material weaknesses described above. Management's efforts have resulted in the effective design of ITGCs over the enterprise resource planning system in which the discovery and safety assessment business, as well as certain corporate