Author name: cyber monk

What the Sarbanes-Oxley Act (SOX) requires: Sections 302, 404, 409, 802 and 906, SOX controls, IT general controls, the annual audit and a practical checklist.

Three common challenges in IT risk management: who makes risk decisions, superficial risk assessments and a closed culture, mapped to NIST CSF 2.0 and ISO/IEC 27001:2022.