Sarbanes Oxley/HIPPA

Government regulations such as the 2002 Sarbanes Oxley Act, requires that most public companies be compliant to its rules. Sarbanes Oxley, also known as “Public Company Accounting Reform and Investor Protection Act”, was established to restore investor confidence in public companies. It encompasses rules and policy which include corporate control over financial reporting to executive compensation.

There are three main areas that concern your IT department:

Section 302 -- Corporate Responsibility for Financial Reports: This section requires executives to certify the accuracy of financial reports.
Section 404 -- Management Assessment of Internal Controls: This section requires executives/auditors to confirm the effectiveness of internal controls.
Section 802 -- Criminal Penalties for Altering Documents: This section mandates the protection/retention of financial audit records.

The dialogue in these sections is vague and not IT-specific. To recap; your IT and security infrastructure is affected and there needs to be “controls” in place, such as firewalls, encryption, authentication mechanisms, access controls and ongoing vulnerability testing etc. – to help protect the validity of financial audit records.

Cryptex will help your organization become more compliant, by protecting your firm’s data with our unbreakable, 448-bit encryption.