Which Cobit Processes Most Relate to SOX 927
marge last edited by
Hi I’m interested to find out if anyone has experience of which of the COBIT processes relate to SOX.
Last year we were audited on 12 out of the 34 processes.
Aquire or Develop application software
Aquire Technology Infrastructure
Develop and maintain Policies and Procedures
Install and Test Application Software and Technology Infrastructure
Define and Manage Service levels
Manage Third Party Services
Ensure system security
Manage the Configuration
Manage Problems and Invcidents
Of these 12 processes we had to comply with 30 out of the 60ish Illustrative controls.
Any feedback on your experiences welcome.