White Papers for Sarbanes-Oxley (SOX)

Profiles in Compliance: Automating Segregation of Duties Wards Off SOX Citation

Approva

Scene: late 2004. Situation: dire. As part of its preparation for Sarbanes-Oxley Act (SOX) compliance, a large
multi-billion dollar high-tech company faced likely citation by its external auditor for having significant material
weaknesses in internal controls. The biggest area of exposure was the segregation of duties (SoD) in application
roles and user access in and across more than 60 different systems in varying technical environments.
The CFO, not willing to risk the company’s financial reputation, internally estimated more than $100M in
potentially lost market capitalization. The CFO mandated that all SoD violations be fully addressed in a little
more than six months so that external auditors could start their testing efforts for 2005.

View the White Paper

Share or bookmarklet this web page at: