SOX

Sarbanes-Oxley Act, the US financial-reporting integrity statute. Section 404 places internal-control over financial reporting (ICFR) on the issuer, and a growing body of PCAOB and SEC commentary treats cyber controls over financial systems as part of ICFR. Attention is triggered by a material weakness disclosure on a 10-K Item 9A, by a restatement precipitated by an IT control failure, by an external-auditor finding on segregation of duties in a close-the-books system, and by a Form SD / supply-chain finding that touches a financially material vendor.

/sox