In Depth

The 404 on Sarbox

Section 404 of the Sarbanes-Oxley Act (Sox) requires companies to establish controls that provide reasonable protection against preventable events that could influence a company's value.

By Ben Worthen

April 01, 2006CSO

Section 404 of the Sarbanes-Oxley Act (Sox) requires companies to establish controls that provide reasonable protection against preventable events that could influence a company's value. This means, for example, making sure that employees couldn't use a company's systems to commit acts of fraud. The same logic applies to supply chains: Companies need to have controls that ­protect them against an adverse event. Other sections of Sox also could cover supply chain security. Section 401 requires companies to account for risk in their off-balance-sheet trans­actions, such as their supply chains. And Section 409 requires companies to report "on a rapid and current basis" events that could have a material impact. One can assume that a bomb in a cargo box would have such an impact.

$firstKeyword

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Security Directions: A Virtual Conference

Security Directions Available On Demand Sept. 30 - Dec. 30

Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.

» Register Now

WEBCAST
Protecting PII: How to Work with IT to Manage Risk

Compuware Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.

» View this Webcast

Featured Sponsors