Regulatory Frameworks 3 - SOX & STIG

Overview:

Examine the Sarbanes Oxley Act which was passed in 2002 to protect investors by improving the accuracy and reliability of corporate disclosures made pursuant to securities laws.

The Security Technical Implementation Guides (STIGs) are the configuration standards for US Department of Defense IA and IA- enabled devices/systems.  The STIGs contain technical guidance to "lock down" information systems/software that might otherwise be vulnerable to a malicious computer attack.

Question PROMPT:

Discuss SOX in 500 words or more. How do logging and separation of duties help comply with SOX? How might database auditing and monitoring be utilized in SOX compliance? How can a dba use  automation to comply with SOX frameworks?

Include at least one quote from 3 articles, place them in quotation marks and cite in-line (as all work copied from another should be handled).

Do not copy without providing proper attribution. Write in essay format not in outline, bulleted, numbered or other list format.  

Use the five paragraph format. Each paragraph must have at least five sentences. Include 3 quotes with quotation marks and cited in-line and in a list of references in APA format. Include an interesting meaningful title.