Archive for April 2nd, 2008

Six Question related with SOX section 404 implementation

Confuse implementing SOX IT Section, here is six question that every SOX auditor should answer
1. Has the organization established an IT-specific internal control framework to guide its section 404 compliance activities with respect to IT?

An IT-specific internal control framework provides vital structure to an organization’s effort to develop and maintain effective internal control in its […]

Popularity: 18% [?]

SOX, how much we should pay?

Are your department ready for SOX Compliance? how much we should pay for this, this Sarbanes Oxley article explain detail about how much every established company should pay for preparing SOX.
Sox compliance is very expensive. I agree, and it’s become more expensive if you put wrong approach in to. Here is an example how much […]

Popularity: 25% [?]

J-SOX, Japanese version of SOX

Also taken from discussion in securityprocedure.com, Sarbanes Oxley Act enacted on July 2002, and after that many version released in every regional trying to comply this standard. One of the versions of SOX is J-SOX or Japanese version of Sarbanes Oxley Act, and also not forgets to mention other version such as European SOX.
The Big […]

Popularity: 30% [?]

I dont understand why implementing SOX is very difficult?

Taken from discussion in 5 reasons why implementing Sarbanes Oxley Act is very very difficult. I’m quite agree for the explanation. Do you have any other suggestion?
For the latest two year, I have been working with Sarbanes Oxley section 404 especially in IT general control. I have been working both in design Risk Control Matrices […]

Popularity: 15% [?]