According to most estimates, first-year efforts to comply with the Sarbanes Oxley Act of 2002 tended to overcompensate by trying to cover too many controls. Stacks of manual assessments first-year SOX filers spent 70 percent of their time resolving deficiencies in IT controls in order to pass SOX audits.
This white paper examines common lessons learned for SOX compliance and shows you how to:
- Reallocate IT expenditures by shifting spending from consultants and contract labor to automated tools
- Deliver continuous training to employees while ensuring accountability with policy
- Restructure the risk management function, internal controls, and IT security
- Automate IT measurements, reporting, controls, change management processes, and IT security policies
- And much more
Information Security Research Library
