SOX 101
To put it mildly, the Sarbanes-Oxley Act of 2002 (SOX) has caused quite a stir in Corporate America and throughout the world. A simple Google search on the phrase "Sarbanes-Oxley" returns more than 3.5 million hits; more than enough to make a person's head ache.
The Act focuses primarily on financial controls and disclosure, but in so doing has a major impact on the internal controls surrounding underlying information technologies. The real question at hand is, what is that impact and who does it really affect? This article provides a quick overview of SOX with specific emphasis on how it relates to IT.
Basically the goal of SOX is to improve the quality of disclosures made by publicly held companies on their financial condition and to protect investors by creating a set of regulations and compliance governance boards. SOX holds the CEO and CFO personally accountable for the representations concerning their company's financial condition.
In doing so, SOX focuses on security and internal controls of an organization and thus has a huge impact on IT systems and organizations. In short, for IT it's about exercising appropriate levels of control, security and disciplines over information, technology infrastructures and IT services
While the SOX has 11 sections or "titles", the ones that focus most on compliance are 302, 404, 409 and 802 are summarized below:
Please log in or sign up below to read the rest of the article.
|
"This planet has - or rather had - a problem, which was this: most of the people living on it were unhappy for pretty much of the time. Many solutions were suggested for this problem, but most of these were largely concerned with the movements of small green pieces of paper, which is odd because on the whole it wasn't the small green pieces of paper that were unhappy." - Douglas Adams |




