26. August 2006
Sarbanes-Oxley Compliance verbessert die Kommunikation
Mit dem Thema SOX-Compliance beschäftigt sich dieser Artikel.
“Sarb-Ox is an amorphous document — it says ‘have controls,’ but it doesn’t tell you what controls or how to have them,” said Scott Thomas, an IT security manager at a large food services company he asked not to be named. Cobit has given his company “a nice solid process” to follow, as well as something to show auditors to demonstrate what security controls are in place. Without Cobit, communication between the business and IT is “apples to oranges,” he said.
Technorati Tags: Compliance, Sarbanes-Oxley, SOX
