IT Compliance

IT Operations

IT Outsourcing Management

Project Management

Speaking Services


Course Title
SOX 404 Compliance - Understanding the implications for IT

Course Description
Section 404 mandates that firms listed on U.S. stock markets provide annual disclosures and quarterly updates to shareholders on the effectiveness of internal controls over financial reporting processes.

The implications for IT departments are far reaching, time consuming, and expensive.  Because of the risk exposure to the company, "doing it right the first time" has never been so important to an IT organization.

This course outlines the management techniques, processes, and framework that can be applied to IT involvement in SOX compliance.

Learning Objectives

  • Gain an understanding of all of the different compliance issues that affect IT.
  • Learn what IT's role is in the SOX 404 compliance process.
  • Understand how the process of preparing for Section 404 compliance from an IT perspective is a significant undertaking and should be managed as a formal project. 
  • Review formal IT processes like ITIL (IT Infrastructure Library) and ITSM (IT Service Management) that can be used as frameworks for IT compliance.
  • Find out what software tools are available that can manage and track IT events that affect SOX compliance.

Major Topics

  • Like any other project with broad scope and consequences, several factors may contribute to an unsuccessful implementation of SOX 404.
  • Planning for success
    • - Organizing and resourcing the project
    • - Plan and Scope the evaluation
    • - Document Controls
    • - Evaluate Design and Operating Effectiveness
    • - Identify, assess and correct deficiencies
    • - Report on internal control
  • Formal IT processes that can create an IT governance framework consistent with compliance.
  • Now that I filed, am I finished?

Who should attend:
CFO's and CIO's of public companies, auditors and consultants to public companies, officers of companies considering going public.

Instructor BIO:
Rocky Vienna is President of the Vienna Technology Group, LLC, an IT consulting firm.  He has 25 years of experience in information technology and business management from Bank of America, Apple Computer, and Coca-Cola.  His extensive background in technology management and operations, and executive management team and board experience, has given him a very broad and deep understanding across a wide range of technology and business management issues.  Mr. Vienna is a member of the Board of Directors for the Professional and Technical Consultants Association.

Back to Speaking Services