is there a "Sarbanes-Oxley Compliance" in UK ?

[2uk]

if you do it right, great way of getting a bit more organisation in IT and the rest of the business to respect security & process.

Any US owned/operated public company has to comply.

I agree proper documentation/procedures are required. What I am saying is that some Us companies are taking this to the extreme, and basically "waste" the time of their employees . ( what a statement )

[ratewhore]

Whoooohooo, good news more projects and more work for us

I also heard there may be another version of Basil II, however am not sure if people are mixing MiFid with Basil !!

Basel. http://europeforvisitors.com/switzau...cles/basel.htm

Or were you doing a Sybil?

[Cowboy Bob]

Who cares man? do you know the number of new projects that were going on in each listed company? do you know how much work such legislation can create for us contractors ! why do you guys always see the half empty glass?

More legislation == more Kerching !

You must be a PM

As a developer I can't imagine anything more horrible that SOX compliance. Documenting my work is one thing. Doing more documentation than coding is just ridiculous and I will actively avoid anything SOX related.

There are two types of contractor, those that are in it for the money and those that actually love what they're doing. I'm in the latter camp, and I intend to keep it that way.

[Weltchy]

Doing more documentation than coding is just ridiculous

You can't be a technical architect then

[n5gooner]

You can't be a technical architect then

When I was working for Bank of America, the SOX stuff came in, we started setting retention periods on email to 30 days, everything after that would get deleted !! and yes everything had to be documented, but then event logs on servers capture most things.

[Mr Crosby]

Ford owned car companies based here have to have a couple of security products installed on all Unix servers, SeOS and a reporting tool SCT.

Also going the same way at my present company who were taken over by the yanks......

[kirk]

Bah, SOX! one of the reasons I left my previous permie job

Among many others I could mention

[Back In Business]

Whoooohooo, good news more projects and more work for us

Have you done SOX work before? It sucks and blows in equal measure and never in a good way.

I heard the Frogs are pushing for it like mad, to try and scupper the British stock exchange.

I'm not sure who the main driver is but the EU don't want to be outdone by those nasty yanks. That's why they are going to go even further - if that's possible. I do think a major fraud will need to be committed in Europe to get general buy-in, so look out for that in the next 6 to 12 months.

Bah, SOX! one of the reasons I left my previous permie job

me too

[cojak]

Proper Change and Configuration Management deals with the majority of SOX issues (certainly the 404 bits).

It's just a matter of knowing who's doing what (and why) to your infrastructure.

Nothing big and scary if done with a bit of intelligence...

(Unless you're a cowboy who doesn't want anyone to know about your proxy server you're using to by-pass the 'no unofficial web mail' rules... ).

[milanbenes]

in my experience sox only applies if you are working on systems belonging to a US stock exchange listed company

Milan.