HowtoAchieveSOXComplianceFaster-SEMIUG.pptVIP

How to Achieve SOX Compliance Faster Presented by Laurie LeBlanc SoftLanding Systems Agenda SOX : Opportunity or Burden? IT Control Framework Software Tools Change Management Testing Security Q A The Sarbanes - Oxley Act of 2002 An Annual Event Title IV Sect 404 - Each annual report must include an “internal control report” The CEO/CFO are responsible for an adequate internal control system Must identify internal control framework used A certified assessment by the CEO/CFO of the control’s effectiveness An external auditor must also attest to the accuracy of these assertions COBIT (Control Objectives for IT) COBIT - IT Governance Maturity Model 0. Non-Existent 1. Initial / Ad Hoc 2. Repeatable but Intuitive 3. Defined Process 4. Managed and Measurable 5. Optimized Where Do I Begin? COBIT, How Software Products Apply 300+ specific COBIT objectives Of those, 164 pertain to SOX Of those, 64 can be met with SoftLanding tools For instance… Job Change and Termination (P07.8) Management should ensure that appropriate and timely actions are taken regarding job changes and terminations so that internal controls and security are not impaired by such occurrences. Software tools do not apply System Software Change Controls (A13.6) Procedures should be implemented to ensure that system software changes are controlled in line with the organization’s change management procedures. Change Management tools directly apply SLS Tools and COBIT Objectives TurnOver Change Management Reports Auditing Specific Changes Easy to audit full lifecycle Initial request Task approval Development work Testing results Change approvals How when changes went live All from a single iSeries database TurnOver Change Management TurnOver Workflow Issue Tracking Issue Tracking Issue Tracking Project Management Project Management Project Management Project Management Development Development Development Development Development TurnOver provides for: Object stamping and versioning