Sarbanes-Oxley: IT pros may not like it but they still need to comply