RE: Sarbanes & Oxley

> Most auditors do not know what they are looking for,  the
> whole thing is very nebulous. 

This is true - and auditors are not great at telling you what to do
right, but are rather good at telling you what you did wrong :(

What auditors will give you good marks for is having picked an IT
standard such as COBIT or ISO17799 and demonstrating your compliance (or
efforts at same) to that standard.  It also makes for a faster and less
expensive audit process if you follow the COBIT script, as opposed to
showing the auditor all of the unique things that you are doing on your
own.

jte



--
John Earl | Chief Technology Officer
The PowerTech Group
19426 68th Ave. S
Seattle, WA 98032
(253) 872-7788 ext. 302
john.earl@xxxxxxxxxxxxx
www.powertech.com 
 

 
This email message and any attachments are intended only for the use of
the intended recipients and may contain information that is privileged
and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message, or by telephone, and delete
the message from your email system.
--

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
> bounces@xxxxxxxxxxxx] On Behalf Of Burns, Carolyn
> Sent: Monday, August 23, 2004 10:45 AM
> To: Midrange Systems Technical Discussion
> Subject: RE: Sarbanes & Oxley
> 
> Most auditors do not know what they are looking for,  the
> whole thing is very nebulous.  I have found that with the
> right SOX specialists in place to assist compliance they
> can show the auditor where there are no gaps and holes as
> the auditor claims.  Saving time, headaches and money.
> 
> Best Regards,
> Carolyn
> Business Development Manager
> MODIS IT
> 1230 Rosecrans Avenue Suite 425
> Manhattan Beach, CA 90266
> Telephone: 310-727-3272
> Cellular Phone:  310-989-0481
> Facsimile:  310/727-1920
> carolyn.burns@xxxxxxxxxxx
> 
> 
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Don
> Sent: Monday, August 23, 2004 10:38 AM
> To: Midrange Systems Technical Discussion
> Subject: RE: Sarbanes & Oxley
> 
> 
> 
> 
> and I bet you that ole Oxley has no clue what kind of can
> of worms he
> unleashed on the IT world....at least that's the drift I
> got from talking
> to one of his staffers last week...
> 
> Don in DC
> 
> ---------------------------
> 
> On Mon, 23 Aug 2004, Graap, Ken wrote:
> 
> > I would have to agree with Carolyn.... SOX is a
> "technical issue" we have
> > been working on all year long! In fact, it is our #1
> technical issue this
> > year!
> >
> > Kenneth
> >
> > -----Original Message-----
> > From: midrange-l-bounces@xxxxxxxxxxxx
> > [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of
> Burns, Carolyn
> > Sent: Monday, August 23, 2004 9:42 AM
> > To: Midrange Systems Technical Discussion
> > Subject: RE: Sarbanes & Oxley
> >
> >
> > This is a technical issue regarding documentation and
> gaps in systems.  If
> > your year end is prior to October 15th 2004 you do not
> have to be compliant
> > until your 2005 year end.  I have consultants who
> specialize in this area in
> > IT and have been working with it quite a bit.  Hope this
> helps.
> >
> >
> > Best Regards,
> > Carolyn
> > Business Development Manager
> > MODIS IT
> > 1230 Rosecrans Avenue Suite 425
> > Manhattan Beach, CA 90266
> > Telephone: 310-727-3272
> > Cellular Phone:  310-989-0481
> > Facsimile:  310/727-1920
> > carolyn.burns@xxxxxxxxxxx
> >
> >
> > -----Original Message-----
> > From: midrange-l-bounces@xxxxxxxxxxxx
> > [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of
> David Gibbs
> > Sent: Monday, August 23, 2004 9:05 AM
> > To: midrange-l@xxxxxxxxxxxx
> > Subject: Re: Sarbanes & Oxley
> >
> >
> > Doug Hart wrote:
> > > Does anyone know if there is a date when companies
> must be SOX compliant?
> >
> > Folks:
> >
> > SOX compliance is pretty much a non-technical topic ...
> could we move
> > this thread over to MIDRANGE-NONTECH
> > (http://lists.midrange.com/listinfo/midrange-nontech)?
> >
> > Thanks!
> >
> > david
> >
> > --
> > This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the
> archives
> > at http://archive.midrange.com/midrange-l.
> >
> >
> > --
> > This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the
> archives
> > at http://archive.midrange.com/midrange-l.
> >
> > --
> > This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the
> archives
> > at http://archive.midrange.com/midrange-l.
> >
> 
> --
> This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the
> archives
> at http://archive.midrange.com/midrange-l.
> 
> 
> --
> This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the
> archives
> at http://archive.midrange.com/midrange-l.