Find out which COBIT principles you can address with Netwrix to achieve compliance with SOX
The Sarbanes-Oxley (SOX) Act was enacted in 2002 to enhance corporate responsibility, require financial disclosure, and combat corporate and accounting fraud. All public companies in the U.S., without exception, are subject to SOX compliance, including overseas operations of U.S. public companies and international companies listed on U.S. exchanges. SOX requires these companies to ensure internal control over financial reporting, while giving them the flexibility to select the “recognized control framework” of their choice. One of such frameworks is COBIT, which is focused on governance of enterprise information technology. However, it is aligned with another common framework, COSO, which provides more general guidance on internal control over financial reporting. These frameworks are more effective in tandem, since COBIT complements COSO in the area of IT controls required to be SOX compliant. The SOX compliance software solution from Netwrix supports the following COBIT principles:
APO07 Manage Contract Staff: Requirement 06
APO12 Manage Risk: Requirements 01, 02, 06
APO13 Manage Security: Requirement 01
APO14 Managed Data: Requirements 08, 09
BAI08 Managed Knowledge: Requirement 02
BAI10 Manage Configuration: Requirements 02, 04
DSS01 Manage Operations: Requirement 03
DSS02 Manage Service Requests and Incidents: Requirements 04, 05
DSS05 Manage Security Services: Requirements 04, 06, 07
DSS06 Managed Business Process Controls: Requirements 02, 03, 06
Learn more about how Netwrix can help you implement the COBIT framework and support your SOX compliance management program.
Depending on the configuration of your IT systems, your internal procedures, the nature of your business and other factors, Netwrix might also facilitate implementation of COBIT processes and practices not listed above.
See exactly how Netwrix solutions help you establish the controls required for SOX compliance
Netwrix solutions help with user behavior analysis and risk mitigation, and enables control over changes, configurations and access in hybrid IT environments. Netwrix provides security intelligence to identify security holes, detect anomalies in user behavior and investigate suspicious activities in time to prevent critical issues that can compromise your data security. Unlike many of the SOX compliance tools on the market, it delivers enterprise-wide visibility and provides the evidence required to prove you have internal controls that ensure the security of information systems and sensitive data — both on premises and in the cloud.