Revised SOX guidelines too little, too late

The US Securities and Exchange Commission (SEC) last week issued new guidelines under the Sarbanes-Oxley Act (SOX) effectively changing the goal posts mid-game.

While some IT managers welcomed the revised rules claiming it will provide much needed relief for organizations struggling to comply, IDC Australia's director of IT programs Catherine Bennett said some companies "may think they have wasted money now."

"If companies were already on track, they've already spent the money to make sure they're compliant, and now some assessment controls have been rolled back; that's money that could have been saved," she said.

See full Article.