Banking Compliance SOX and Password Issuance

Visitors can check out the Forum FAQ by clicking this link. You have to register before you can post: click the REGISTER link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. View our Forum Privacy Policy.
Want to receive the latest contracting news and advice straight to your inbox? Sign up to the ContractorUK newsletter here. Every sign up will also be entered into a draw to WIN £100 Amazon vouchers!

You are not logged in or you do not have permission to access this page. This could be due to one of several reasons:

You are not logged in. If you are already registered, fill in the form below to log in, or follow the "Sign Up" link to register a new account.
You may not have sufficient privileges to access this page. Are you trying to edit someone else's post, access administrative features or some other privileged system?
If you are trying to post, the administrator may have disabled your account, or it may be awaiting activation.

thunderlizard replied

29 July 2010, 11:28
The Sarbanes Oxley act is nowhere near that specific. Read it- only 1 paragraph is related to IT, and only because it mentions "adequate internal controls". How you interpret that is to be agreed between you and the nominated finance people.
Leave a comment:
dspsyssts started a topic Banking Compliance SOX and Password Issuance

28 July 2010, 22:22
Banking Compliance SOX and Password Issuance

Anyone know anything about SOX compliance with regard to the requesting and distribution of passwords within a financial organization?

EG should a change request ticket documenting the problem specify the server and userid password being requested?

Should passwords be distributed encrypted or via two emails so the server name and password and separate etc?

Any links or hints gratefully received....I appreciate this probably isn't the best forum but maybe someone knows?
Tags: None