Figuring Out Whether SOX Applies to You .................................................
SOX applies to you if you are:
A publicly traded company, a division of a publicly traded company, or a
wholly owned subsidiary of one
A non-U.S. public multinational engaging in business in the U.S.
An audit firm that works for either of the above
If you don’t fit in those categories (but you are a private company or a not-
for-profit), two parts of the Act still apply to you:
By law, you are not allowed to punish whistle-blowers. (In other words,
don’t shoot the messenger.)
You may not alter, cover up, falsify, or destroy any document to prevent
its use in an official investigation. (To put it simply, stay away from the
shredder.)
SOX Online (www.sox-online.com), shown in Figure 4-1, is a great source for
news and information about SOX; it will keep you laughing, too (believe it
or not).
Figure 4-1:
SOX Online
(www.sox-
online.com)
provides a
wealth
of SOX
information
along with
humor for
good
measure.
90 Part II: Diving into GRC
