Free Pricing | JCPenney Coupons | Pizza Hut Coupons | Home Depot Coupons
Sarbanes-Oxley: A Cross-Industry Email Compliance Challenge

Sarbanes-Oxley: A Cross-Industry Email Compliance Challenge

by Rick Turoczy on November 21, 2006

The bulk of financial information in many companies is created, stored and transmitted electronically, maintained by IT and controlled via information integrity procedures and practices. For these reasons, compliance with federal requirements such as the Sarbanes-Oxley Act (SOX) is heavily dependent on IT. Companies that must comply with SOX are U.S. public companies, foreign filers in U.S. markets and privately held companies with public debt. Ultimately, the corporate CEO and CFO are accountable for SOX compliance, and they will depend on company finance operations and IT to provide critical support when as they report on the effectiveness of internal control over financial reporting.

Sound practices include corporate-wide information security policies and enforced implementation of those policies for employees at all levels. Information security policies should govern network security, access controls, authentication, encryption, logging, monitoring and alerting, pre-planned coordinated incident response, and forensics. These components allow for information integrity and data retention, while enabling IT audits and business continuity.

Sarbanes-Oxley: A Cross-Industry Email Compliance Challenge

Leave a Comment

Previous post:

Next post: