Sarbanes-Oxley Compliance Resource Kit

Sarbanes-Oxley Section 404 requires that:

Enterprises have an enterprise wide security policy;

Enterprises have enterprise wide classification of data for security, risk, and business impact;

Enterprises have security related standards and procedures;

Enterprises have formal security based documentation, auditing, and testing in place;

Enterprise enforce separation of duties; and

Enterprises have policies and procedures in place for Change Management, Help Desk, Service Requests, and changes to applications, policies, and procedures.

See full Details