- SOX Section 404 (Sarbanes-Oxley Act Section 404) mandates that all publicly-traded companies must establish internal controls and procedures for financial reporting and must document, test and maintain those controls and procedures to ensure their effectiveness. The purpose of SOX is to reduce the possibilities of corporate fraud by increasing the stringency of procedures and requirements for financial reporting.
Getting started with SOX
To explore how the SOX is used in the enterprise, here are some additional resources:
Five steps for SOX compliance
Having trouble getting compliant with SOX 404? Follow these five steps to get you on the right track towards SOX compliance.
Using virtualization for compliance efforts
Are you looking for a way to ease the burden of meeting compliance requirements? Learn how financial-services firms can use virtualization to assist with compliance efforts.
FISMA and SOX
Why are there still breaches of confidentiality when FISMA and SOX compliance have been around for years? Find out here.
Learn more about SOX financial reporting compliance
Some Things SOX Doesn't Say: SOX Myths: In this excerpt from Chapter 1 of "Sarbanes-Oxley for Dummies," author Jill Gilbert Welytok demystifies four common myths about SOX.
Using virtualization for compliance efforts: In this tip, Judith Myerson explains how virtualization technology can overcome problems associated with physical servers and aid the compliance process.
Keeping SOX 404 under control(s): Security expert Kevin Beaver reviews several security policies that most corporations will need to comply with SOX 404.
Regulatory reform will require much work ahead Financial security pros will need to step it up in light of President Obama's plan to overhaul the financial regulatory system, David Schneier writes.
Infosecurity pro pitfalls David Schneier reflects on some missteps he's seen in the infosecurity profession
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.