The appropriately named Sarbanes-Oxley Compliance Toolkit includes a whole range of materials specifically put together to both introduce, and take you through this most important of legislation.
As security is such a major theme on the Act, many organizations are using the international ISO standards. The ISO 27001 Portal outlines these. A copy of the standards, and security policies, can be obtained via the ISO 17799 Toolkit.
The SOX email storage requirements can be fulfilled using the
GFI MailArchiver
SOX Advertisers
Sarbanes What?
Our server logs indicate some interesting mis-spellings: Sarbannes Oxley, Sorbane Oxley, Sarbanne Oxley, Sarbaines Oxley, Sarbanesoxley, Sorbanes Oxley, Sabanes Oxley, Sarbane Oxley, and Sarbanes Oaxley, to name but a few!
Joined: Nov 25, 2004 Posts: 787 Location: London, UK
Posted: Thu May 15, 2008 3:59 am Post subject: COSO ERM
I'm currently looking at options around the ERM/GRC space and would be interested in hearing of others who have implemented COSO ERM - or other ERM methodologies.
Of particular interest to me are:
- aligning Op Risk and Internal Control over Financial Reporting
- technology solutions
- KPI/KRI reporting
- wider stratgic risk management _________________ "The art of life is to deal with problems as they arise, rather than destroy one's spirit by worrying about them too far in advance" - Cicero
@Denis - If you ever check back into this post, I'd like to touch base and see what you ended up doing for ERM and GRC. My company is about to take some steps forward with ERM and eventually transition into a GRC. I'd love to hear what you ended up doing.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
Trademarks referenced on the SOX Act Forum are property of their respective owners. Comments are property of their respective posters. Sarbanes-Oxley Act Implementation Portal: Sarbanes Oxley compliance, information, software, & internal audit committee resources. Sarbox. Site source is copyright nuke (c)2003, and is Free Software under the GNU / GPL licence agreement. All Rights Are Reserved.