Friday, April 08, 2005

Sarbanes-Oxley (SOX) and IAM white paper

According to the white paper published by Evidian SOX compliance can bring in benefits for an organization in terms of investor confidence and rationalization of financial business processes.

The part of SOX that most directly concerns IT security is Section 404, which aims at strengthening internal control over financial reporting, and in so doing, minimizing material weaknesses in the reporting process. Section 404 requires that audited reports which concerned companies file yearly at the SEC, known as 10K, include a section on the status and effectiveness of internal control over financial reporting.

The Securities and Exchange Commission issued its final rule in August 2003 and specified the content of this section, as well as the general procedure to be used in this management assessment. As most financial activity is performed on IS resources, Identity and access management (IAM) plays a significant part in helping maintain the integrity of a company’s reporting process. Of course, IAM is just one piece of the overall SOX compliance process, but it can help make that process significantly easier to implement, maintain and audit.

Sarbanes-Oxley (SOX) and IAM white paperSarbanes-Oxley (SOX) and IAM white paper

Send to a friend:

0 Comments:

Post a Comment

<< Home

Previous articles

NPC Morning Newsmaker Program to Feature Chairman ...

SOX Compliance - Cutting Through the Static

Threat of the auditors

Directors face change in Europe

Act drains public firms' time, money

Robert D. Novak: Regulatory overkill by SEC audito...

Does regulation work? 'Don't ask me,' says former ...

Association asks SEC to clarify compliance measure...

UK version of Sarbanes-Oxley in force today

Small banks seek waiver from new SEC rules