Sarbanes-Oxley Compliance: A View from the Trenches
In this article, we will be discussing several real-world examples of the kinds of controls that are being imposed in IT organizations under the guise of compliance with Section 404 of the US Sarbanes-Oxley Act (SOX). It is our contention that these controls are inappropriate under any reading of Section 404. We also argue that there is a core difference between internal controls over financial reporting (what 404 says) and the internal controls an organization might choose to put in place for a host of other reasons.
Cutter Consortium clients, please log in:
If you would like further information about how to become a client, please contact us at +1 781 648 8700 or sales@cutter.com.



Purchase from the bookstore