Policies fo J-Sox 2221

  • In my previous Sox engagement, I’ve only written an IT manual and we used the same manual for policies. Now i’m working on IT J-Sox compliance project and they want 4 different Entity level policies. my questions is as follow:
    How many entity level policies should i have? shoul I have one entity policy and then sub policies for it? or should i have one and then sub policies for each section/area…does anyone knows if there is a different approach for JSOX?
    Please do help me out.

Log in to reply