What matters for privacy
Key points
Sections 302 & 404
Management certification of controls, and an assessment of internal control over financial reporting.
IT general controls
Access management, change control and operations, the backbone privacy audits also rely on.
Access governance
Least privilege and segregation of duties that double as privacy safeguards.
Evidence discipline
Repeatable, documented evidence, the habit that makes ISO and privacy audits pass.
SOX is not a privacy law, but the control and evidence discipline it demands is directly reusable. A full guide for this jurisdiction is in preparation. For a detailed applicability read today, talk to a consultant.
How we help
From applicability to evidence
We map your processing to this regime, build the controls behind the obligations, and prepare the evidence that proves compliance.
Start a conversation