Business Continity Plans 971
andycuthbert last edited by
It had been my understanding that BCPs were required in the SOX Act. Was I mistaken or is it a liberal reading of the Act that requires it? If so, where is that written.
CoolCat last edited by
No actually, specifically excluded. However you do need to be able to re-create the financials in case of data loss, so you need backups etc.
This seems to me to be a weakness in the act, in view of the fact that it’s supposed to be about investor protection. You can invest in a company on Friday, it has a major incident over the weekend, and you’ve lost all your money on Monday because it had no BCP.
lekatis last edited by
We have discussed the BCP challenges: