SOX compliance for small businesses
Where do companies go for help with getting Sarbanes Oxley compliant? Are CIOs and software development managers required in these organizations? Are business analysts required to know the appropriate SOX controls as part of their normal jobs?
Software/Hardware used:
Software/Hardware used:
ASKED:
April 1, 2009 11:03 PM
UPDATED:
April 3, 2009 1:09 PM
Answer Wiki:
A SOX consultant can probably get you want to need. Small companies aren't required to be SOX compliant. SOX is only required of public companies.
To be SOX compliant a good number of people within your company will need to have some knowledge of the compliance requirements.
To see all answers submitted to the Answer Wiki: View Answer History.
A friend’s small public company wants to create a business analyst job with additional responsibility.to suggest and implement SOX controls. I am BA but have no SOX experience or accounting background.. I think his company needs inexpensive SOX consultants. Where to find? Also they have no CIO or software dev mgr yet. With no IT management is a company mature enough for SOX?
Honestly, probably not. SOX is all about having policies in place to control how every interaction between the employees and the systems works. Without an IT management in place to write and implement these policies it will be tough to pass an audit.
SOX only applies to companies that are publicly held. Private companies are not required to comply.
In the IT trenches? So am I – read my IT-Trenches blog