Sarbanes-Oxley: Section 404
There are many elements to the SOX legislation, but
Section 404: Management Assessment of Internal
Controls is the part that addresses the internal control
over financial reporting, where IAM’s related IT controls
need to be carefully considered. Section 404 is creating a
challenge for management and is one area where budget
for addressing control issues is typically being directed.