There seems to be a wide range of experiences with Sarbanes-Oxley. I’ve heard some IT pros say that they’ve always got at least one person from their IT department assigned to help auditors access data for compliance with Sarbanes-Oxley and other regulations. However, other IT pros seem like they’ve scarcely heard of SarbOx and didn’t realize that it has implications for their company and their IT department.
Where does your IT department stand with SarbOx compliance?
