Sarbanes-Oxley is part of US legislation that applies to all companies registered with the United States Securities & Exchange Commission (SEC).
Executives who fail to implement adequate measures to meet the requirements of Sarbanes-Oxley Act can be held personally and legally liable as observed in many high profile cases in the United States.
The Sarbanes Oxley Standard includes a number of technical requirements and internal control requirements relating directly to Information Security Management. This includes the approach to Risk Management, User Account Management, Identification and Access Control, Security Incident Handling and Implementation of Security Audit Controls.
Ward Solutions Security Assessment can be tailored to address the technical security requirements of Sarbanes Oxley.