Tag
Sox
4 articles
Compliance frameworks
SOX change management controls
How SOX auditors test program change: the change population, testing and approval, developer access to production, emergency changes and config changes.
6 min read
Compliance frameworks
SOC 2 vs SOC 1: which report your customers need
SOC 1 serves your customers' financial auditors. SOC 2 serves their security teams. How to tell which one a request is really for, and when you need both.
6 min read
Compliance frameworks
Access to programs and data for SOX
The SOX ITGC access controls auditors test: provisioning, removal, access reviews, privileged access and segregation of duties, with the evidence each needs.
6 min read
Compliance frameworks
SOX IT general controls, explained
What SOX IT general controls are, why financial auditors test them, the four areas they cover, how systems get scoped in, and how they differ from SOC 2.
6 min read