SOX COMPLIANCE
The Sarbanes–Oxley (SOX) Act requires corporate financial disclosure for all publically traded companies in the US. Enacted in 2002, it aims to strengthen corporate responsibility and prevent accounting fraud.
The Sarbanes–Oxley Act of 2002 (SOX) is a federal law that establishes requirements for all U.S. publicly traded company boards, management, and public accounting firms. The purpose of the legislation is to improve the accuracy and reliability of corporate disclosures.
Sections 302 (“Corporate Responsibility for Financial Reports”) and 404 (“Management Assessment of Internal Controls”) are particularly relevant to information professionals. Section 302 holds CEOs and CFOs personally accountable for disclosure accuracy, while Section 404 requires corporations to have their internal controls audited and reported annually to the SEC.
The Information Technology Governance Institute (ITGI) developed IT control objectives for SOX using the COSO and COBIT frameworks. The controls below represent a sample of COSO and COBIT recommendations that apply to Cygna Auditor.
Infrastructure Resource Protection and Availability
Final Acceptance Test
Critical IT Resources
Security Testing, Surveillance and Monitoring
Security Testing, Surveillance and Monitoring
Change Closure and Documentation
Monitoring and Reporting
Identity Management
User Account Management
IT Infrastructure Monitoring
Cygna Auditor captures both successful and failed data access events, including file and folder creation, access, updates, and deletions, while providing full attribution of who performed each action and when.

Cygna Auditor provides built-in and customizable alerts that immediately notify you of critical security events, such as changes to privileged group membership.

Cygna Auditor monitors all changes made by privileged identities to ensure compliance with regulatory and organizational policies and to prevent misuse of elevated access.

Our experienced engineers will fine-tune the demo based on your specific needs. You’ll find out how easy it can be to secure your sensitive data.