The purpose of the Sarbanes Oxley Act is to prevent fraudulent accounting practices in publicly held corporations. Congress passed SOX in 2002 after a series of accounting scandals duped stockholders ...

Good information security professionals don’t need a regulation to tell them it’s important to protect their business. But, overprotecting the business? That’s another matter. Section 404 of the ...