Sarbanes-Oxley: Implementation and Compliance

Course Overview

Security and Internal Controls are no longer a luxury, they are required by law.

The Sarbanes-Oxley Act (SOX) was enacted in July 2002, largely in response to large public failures of corporate governance. Securities and Exchange Commissions (SEC) rulings is that IT Internal Controls must assure the secure, stable, and reliable performance of computer hardware, software, and IT personnel connected to financial systems.

This course will help individuals understand both the spirit and practicality of the ACT. Challenges will be highlighted and delegates will be taught the best IT and security practices that must be implemented to make their organisation compliant to the Law.

The seminar has been designed to provide IT and information security professionals with the knowledge and skills needed to understand and support Sarbanes-Oxley compliance. This interactive class will cover the Act, the PCAOB standards, the COSO and COBIT frameworks, the controls and the obligations of the IT and Security department. The seminar is tailored to meet the specific needs and is presented in clear terms using analogies, examples and case studies.

Audience

CIOs. IT and Information Security Directors, Managers and Professionals. Risk and Compliance Officers. IT and Security Process Owners.

Course Outline

• The Need
• The Act
• The Sarbanes-Oxley Act of 2002: An Overview
• Companies Affected
• Employees Affected
• Effective Dates
• The Sarbanes-Oxley Act of 2002: Key Sections
• The players: SEC, PCAOB
• Meeting the Information Security Requirements of SOX
• SOX and Risk Assessments
• IT Security
• Internal Controls
• IT Controls and Sarbanes Oxley Act Relevance
• Computer Forensics Investigation and Proactive Strategies
• Business Intelligence
• Business Continuity and Disaster Recovery
• COSO - the framework on controls for financial processes
• COBIT - the framework that focuses on IT
• The Project and the Project Management
• Program Development and Program Change
• Computer Operations and Access to Programs and Data
• Reports used to Validate SOX Compliant IT Infrastructure
• Reporting Weaknesses and Deficiencies
• Documentation Issues
• SOX and Security Monitoring
• SOX Testing
• Records Retention
• Real-time Disclosure
• European Answer to SOX
• Integrating Sox IT security with GLBA, HIPAA and other regulations
• The Vendors and the Sox Industry
• Cost
• Continuous Compliance
• 2005 and Beyond

Sarbanes-Oxley: Implementation and Compliance / SOX-IC