{"id":46783,"date":"2024-08-27T05:45:00","date_gmt":"2024-08-27T12:45:00","guid":{"rendered":"https:\/\/www.syteca.com\/?post_type=glossary&#038;p=46783"},"modified":"2024-11-19T02:44:08","modified_gmt":"2024-11-19T09:44:08","slug":"what-is-sox","status":"publish","type":"glossary","link":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox","title":{"rendered":"What Is SOX?"},"content":{"rendered":"\n<p>The Sarbanes-Oxley Act (SOX) is an essential law for public companies operating in the US. The primary goal of SOX is to improve corporate governance, enhance the accuracy and reliability of company disclosures, and prevent accounting fraud and corruption.<\/p>\n\n\n\n<p>This post reveals the meaning of SOX, its benefits, main cybersecurity requirements, and key steps to achieve compliance.&nbsp;<\/p>\n\n\n\n<h2  class=\"wp-block-heading\">What is SOX?<\/h2>\n\n\n\n<p>The <a href=\"https:\/\/sarbanes-oxley-act.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Sarbanes-Oxley Act<\/a>, known as SOX, is a US federal law that establishes comprehensive auditing procedures and financial regulations for public companies. SOX aims to prevent fraudulent financial reporting by organizations.&nbsp;<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><strong>\u201cThe Sarbanes-Oxley Act of 2002 (SOX) is a US audit regulation covering financial reporting rules. It was implemented to guard against financial misconduct.\u201d<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/www.gartner.com\/en\/finance\/glossary\/sarbarnes-oxley-act-sox-\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Gartner<\/em><\/a><em>.<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>SOX was established in response to loud financial scandals created by companies like <a href=\"https:\/\/internationalbanker.com\/history-of-financial-crises\/the-worldcom-scandal-2002\/\" target=\"_blank\" rel=\"noreferrer noopener\">WorldCom<\/a> and <a href=\"https:\/\/www.investopedia.com\/updates\/enron-scandal-summary\/\" target=\"_blank\" rel=\"noreferrer noopener\">Enron<\/a>.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>WorldCom, a telecommunications giant, engaged in fraudulent accounting activities to falsely inflate the value of its assets by over $11 billion.&nbsp;<\/li>\n\n\n\n<li>Enron, an energy company, used deliberately obscure accounting practices to hide its debt and inflate profits.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>These situations exposed significant weaknesses in corporate governance and led to the enactment of the Sarbanes-Oxley Act.&nbsp;<\/p>\n\n\n\n<p>The act incorporates both business and cybersecurity requirements to enhance financial transparency and accountability.<\/p>\n\n\n\n<h2  class=\"wp-block-heading\">What are the benefits of SOX compliance?<\/h2>\n\n\n\n<p>SOX compliance isn\u2019t just a mandatory procedure for publicly traded companies and their auditors. Achieving SOX compliance also offers several significant benefits for organizations of all sizes.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/08\/27052140\/1-What-is-SOX_.svg\" alt=\"Benefits of SOX compliance\" class=\"wp-image-46988\" style=\"width:828px;height:auto\"\/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Increased accuracy of financial reporting<\/h3>\n\n\n\n<p>SOX compliance ensures that financial reports are free from misstatements, providing a true and fair view of the company&#8217;s financial health. Compliance efforts often result in the deployment of advanced software that provides greater accuracy for financial reporting.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Improved data security<\/h3>\n\n\n\n<p>SOX compliance mandates strict controls over data access and integrity. This requirement drives organizations to implement robust security measures to protect sensitive financial data, resulting in reduced risk of compromising financial and non-financial data.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Better IT governance<\/h3>\n\n\n\n<p>SOX requirements encourage the implementation of comprehensive IT controls and policies. SOX controls can help make sure your IT systems and processes align with regulatory requirements and organizational goals, which leads to more efficient management of IT resources.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Strong reputation<\/h3>\n\n\n\n<p>SOX compliance demonstrates your commitment to high standards of corporate governance and financial integrity. That\u2019s why SOX-compliant organizations are viewed as more reliable and trustworthy, attracting more customers, partners, and investors.&nbsp;<\/p>\n\n\n\n<p>Understanding the severity of SOX non-compliance is crucial for grasping the importance of adhering to these requirements.&nbsp;<\/p>\n\n\n\n\t\t<div  class=\"block-4b33c6b1-f455-4813-a18e-8b78baa0685b areoi-element pattern-read-also rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(16, 206, 158,0.1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-poppins opacity-50 has-text-color\" style=\"color:#1a3b4e;font-style:normal;font-weight:500\">Learn more about<\/p>\n\n\n\n<p class=\"p-poppins\" style=\"font-size:1.38rem;font-style:normal;font-weight:600\"><a href=\"\/en\/solutions\/meeting-compliance-requirements\/sox-compliance\" target=\"_blank\" rel=\"noreferrer noopener\">Achieving SOX compliance with Syteca<\/a><\/p>\n\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n<h2  class=\"wp-block-heading\">What are the consequences of SOX non-compliance?<\/h2>\n\n\n\n<p>Failing to meet the requirements of SOX can result in significant penalties, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Monetary fines<\/strong>. Organizations that fail to meet SOX requirements may face significant fines. <a href=\"https:\/\/www.sarbanes-oxley-101.com\/SOX-906.htm\" target=\"_blank\" rel=\"noreferrer noopener\">Depending on the severity of the violation<\/a>, these penalties can reach <strong>$5 million<\/strong>. And executives who willfully certify misleading reports could be indicted and receive up to 20 years in prison.<\/li>\n\n\n\n<li><strong>Reputational damage<\/strong>. Non-compliance can significantly harm a company&#8217;s reputation, resulting in loss of investor trust and market value. The negative publicity can have long-term adverse effects on the organization&#8217;s profitability.<\/li>\n\n\n\n<li><strong>Legal actions.<\/strong> Companies may face fraud accusations and lawsuits from investors, shareholders, and regulatory bodies, further compounding the financial and reputational damage.<\/li>\n<\/ul>\n\n\n\n<h2  class=\"wp-block-heading\">Who must comply with SOX?<\/h2>\n\n\n\n<p>Organizations that must comply with the SOX primarily include all publicly traded companies in the US, their subsidiaries, and affiliates. These are:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/08\/27052432\/2-What-is-SOX_.svg\" alt=\"Companies that need to comply with SOX\" class=\"wp-image-46995\"\/><\/figure>\n\n\n\n<p>Some SOX requirements also apply to nonprofits and privately-held companies. These organizations must adhere to guidelines that forbid knowingly destroying or falsifying financial documents. Private companies planning their initial public offerings (IPOs) must also become SOX-compliant before they go public.<\/p>\n\n\n\n<h2  class=\"wp-block-heading\">What are the main SOX cybersecurity requirements?<\/h2>\n\n\n\n<p>SOX requires organizations to secure financial data by implementing specified cybersecurity mechanisms. In particular, organizations have to:<\/p>\n\n\n\n\t\t<div  class=\"block-d61a2f8b-2ba4-4b67-ad10-2f32c0b3f0e1 areoi-element container template-16 px-0\">\n\t\t\t\n\t\t\t\n\n<p class=\"has-text-align-center text-26-22 p-poppins\" style=\"font-style:normal;font-weight:600\">SOX cybersecurity requirements<\/p>\n\n\n\n\t\t<div  class=\"block-7e65f864-eebb-494a-968f-90b2fdf1fc90 row areoi-element\">\n\t\t\t\n\n\t\t\t\n\n\t\t<div  class=\"block-50cc948d-8398-4e88-8053-521874815a45 col areoi-element col-12 col-lg-6\">\n\t\t\t\n\t\t\t\n\n\t\t<div  class=\"block-5dcf9cb4-a50d-4935-817c-d526f996b1ee areoi-element rounded-bg-13px h-100\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(242, 250, 254,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n\t\t<div  class=\"block-4022e4d9-f2d8-4e6f-81e2-9b027e7adec8 row areoi-element h-100\">\n\t\t\t\n\n\t\t\t\n\n\t\t<div  class=\"block-113de618-d816-4dcb-ace7-c9211674a8c2 col areoi-element ps-3 ps-md-0 ps-lg-3 align-self-center col-9 col-xxl-10\">\n\t\t\t\n\t\t\t\n\n<p class=\"p-poppins mb-0 ps-xl-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Implement robust&nbsp; controls over access to financial data<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-eb0d1df7-b98a-4b4f-8512-ac14885739fa col areoi-element col-12 col-lg-6\">\n\t\t\t\n\t\t\t\n\n\t\t<div  class=\"block-3e47e8c0-fe0a-47c7-9166-d40171c64882 areoi-element rounded-bg-13px h-100\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(242, 250, 254,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n\t\t<div  class=\"block-73fc59e5-3d7f-4c9f-b64f-042dbe690338 row areoi-element h-100\">\n\t\t\t\n\n\t\t\t\n\n\t\t<div  class=\"block-4fa6114a-9ce3-4f3b-95a0-3b432dfcb44c col areoi-element ps-3 ps-md-0 ps-lg-3 align-self-center col-9 col-xxl-10\">\n\t\t\t\n\t\t\t\n\n<p class=\"p-poppins mb-0 ps-xl-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Secure financial data<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-10fe056a-7e7c-44e9-aba9-9f83e5a90e1a col areoi-element col-12 col-lg-6\">\n\t\t\t\n\t\t\t\n\n\t\t<div  class=\"block-2d38d511-c6da-4e19-a2b7-8831b29da7ad areoi-element rounded-bg-13px h-100\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(242, 250, 254,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n\t\t<div  class=\"block-18a9a1ce-aeb0-4413-be29-f4fec1f1f0ce row areoi-element h-100\">\n\t\t\t\n\n\t\t\t\n\n\t\t<div  class=\"block-2d734441-aaa7-44c3-a11c-0752154d012d col areoi-element ps-3 ps-md-0 ps-lg-3 align-self-center col-9 col-xxl-10\">\n\t\t\t\n\t\t\t\n\n<p class=\"p-poppins mb-0 ps-xl-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Audit and monitor how users handle financial data<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-e2789fee-cdd2-4e54-b827-d7304e2a75bc col areoi-element\">\n\t\t\t\n\t\t\t\n\n\t\t<div  class=\"block-33424547-4882-4dca-903f-67e64be58ebd areoi-element rounded-bg-13px h-100\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(242, 250, 254,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n\t\t<div  class=\"block-4a9eb362-4312-4550-a696-a4755ae9bf9e row areoi-element h-100\">\n\t\t\t\n\n\t\t\t\n\n\t\t<div  class=\"block-cdfcca69-6197-48e1-9cf6-b09c254d1f54 col areoi-element ps-3 ps-md-0 ps-lg-3 align-self-center col-9 col-xxl-10\">\n\t\t\t\n\t\t\t\n\n<p class=\"p-poppins mb-0 ps-xl-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Establish an incident response plan<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n<h3 class=\"wp-block-heading\">Implement robust controls over access to financial data<\/h3>\n\n\n\n<p>Organizations must establish and maintain robust internal controls over financial reporting. SOX requires companies to enforce reliable access management procedures to ensure that only authorized users can access sensitive financial information. This includes <a href=\"\/en\/two-factor-authentication-tool\" target=\"_blank\" rel=\"noreferrer noopener\">two-factor authentication<\/a>, <a href=\"\/en\/blog\/rbac-vs-abac\" target=\"_blank\" rel=\"noreferrer noopener\">role-based access control<\/a>, and constant <a href=\"\/en\/blog\/user-access-review\" target=\"_blank\" rel=\"noreferrer noopener\">review of access permissions<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Secure financial data<\/h3>\n\n\n\n<p>According to SOX, companies must protect financial data from cyber threats. This involves using strong encryption mechanisms and deploying <a href=\"\/en\/product\/user-activity-monitoring\" target=\"_blank\" rel=\"noreferrer noopener\">monitoring solutions<\/a> that can detect and mitigate potential threats to financial data. Conducting regular <a href=\"\/en\/blog\/insider-threat-risk-assessment\" target=\"_blank\" rel=\"noreferrer noopener\">risk assessments<\/a> is also crucial as this measure can help identify weaknesses in IT infrastructure and promptly address them.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Audit and monitor how users handle financial data<\/h3>\n\n\n\n<p>SOX mandates organizations to perform continuous auditing and monitoring of how users handle financial data to track changes in documentation and prevent falsification. Maintain detailed audit trails of all activity related to financial data and ensure logs are comprehensive and tamper-proof.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Establish an incident response plan<\/h3>\n\n\n\n<p>Organizations must develop clear procedures for <a href=\"\/en\/blog\/incident-response-plan-tips\" target=\"_blank\" rel=\"noreferrer noopener\">responding to cybersecurity incidents<\/a>, including steps for containment, investigation, and mitigation of incidents. They also must ensure employees are aware of these procedures. After the incident, companies must conduct a thorough investigation and document everything for future reference and compliance audits.<\/p>\n\n\n\n\t\t<div  class=\"block-4b33c6b1-f455-4813-a18e-8b78baa0685b areoi-element pattern-read-also rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(16, 206, 158,0.1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-poppins opacity-50 has-text-color\" style=\"color:#1a3b4e;font-style:normal;font-weight:500\">Learn more about<\/p>\n\n\n\n<p class=\"p-poppins\" style=\"font-size:1.38rem;font-style:normal;font-weight:600\"><a href=\"\/en\/solutions\/investigate-security-incidents\" target=\"_blank\" rel=\"noreferrer noopener\">Security Incident Investigation with Syteca<\/a><\/p>\n\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n<h2  class=\"wp-block-heading\">What are the key steps of a SOX compliance audit?<\/h2>\n\n\n\n<p>Internal SOX compliance audits are essential for ongoing risk management and improvement within organizations, whereas external audits provide an independent assessment of compliance with regulatory requirements.&nbsp;<\/p>\n\n\n\n<p>Companies must conduct an external SOX compliance audit every year, which involves a comprehensive review of their internal controls and financial statements. The key steps to prepare for a SOX audit include:<\/p>\n\n\n\n\t\t<div  class=\"block-65264e6e-5118-408e-a8c0-1e1bb026fda6 areoi-element container template-15 mx-0\">\n\t\t\t\n\t\t\t\n\n<p class=\"has-text-align-center text-26-22 p-poppins\" style=\"font-style:normal;font-weight:600\">SOX compliance checklist<\/p>\n\n\n\n\t\t<div  class=\"block-febd958a-8d90-47c1-97b6-d04e1ea7b637 row areoi-element pt-3 row-cols-1\">\n\t\t\t\n\n\t\t\t\n\n\t\t<div  class=\"block-00293862-de68-4439-86cc-012eaa67310c col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">1<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Scoping and planning<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-94d314aa-cecc-4a64-bb45-3b08a63d9419 col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">2<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Risk assessment<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-00293862-de68-4439-86cc-012eaa67310c col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">3<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Internal controls over financial reporting<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-94d314aa-cecc-4a64-bb45-3b08a63d9419 col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">4<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Data security and access controls<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-00293862-de68-4439-86cc-012eaa67310c col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">5<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Audit trails<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-94d314aa-cecc-4a64-bb45-3b08a63d9419 col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">6<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Responsibilities of the management<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-00293862-de68-4439-86cc-012eaa67310c col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">7<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Documentation<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-39a21c0f-9cd5-4d82-8ad0-4953817cf7b1 col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">8<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">External auditing<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-00293862-de68-4439-86cc-012eaa67310c col areoi-element p-4 mb-4 d-flex align-items-center rounded-13 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(255, 255, 255,1)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n<p class=\"p-3 mb-0 rounded-13 has-text-color has-background\" style=\"color:#fefdfd;background-color:#4790ea;font-size:2.5rem\">9<\/p>\n\n\n\n<p class=\"p-poppins mb-0 ps-4\" style=\"font-size:1.25rem;font-style:normal;font-weight:600\">Ongoing monitoring and improvement<\/p>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n\n\t\t\t \n\t\t<\/div>\n\t\n\n\n<h3 class=\"wp-block-heading\">Scoping and planning<\/h3>\n\n\n\n<p>Determine the specific financial and IT processes that are subject to SOX compliance. Clearly establish the scope, boundaries, and objectives of the audit. Assemble a team responsible for the auditing process.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Risk assessment<\/h3>\n\n\n\n<p>Assess risks related to financial data and systems, including cybersecurity threats, and update risk management strategies accordingly. Develop and implement procedures to minimize identified risks, ensuring they are aligned with both financial reporting and cybersecurity needs.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Controls over financial reporting<\/h3>\n\n\n\n<p>Clearly document all financial processes, including how financial data is handled, processed, and reported. Keep thorough records of all controls and processes, as these documents are crucial for both internal and external audits.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Data security and access controls<\/h3>\n\n\n\n<p>Establish processes to manage and document any changes made to financial systems and relevant software, ensuring that all changes are tracked and approved by the board. Implement strict access controls to ensure that only authorized personnel can access critical financial systems and data. This should include both physical and digital access points.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Audit trails<\/h3>\n\n\n\n<p>Provide records of all financial transactions and system access. Set up continuous logging and monitoring of activities within financial systems to detect and respond to suspicious activities. Make sure that audit trails are retained for at least seven years.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Responsibilities of the management<\/h3>\n\n\n\n<p>Require the CEO and CFO to certify the accuracy of financial statements and the effectiveness of internal controls, including cybersecurity measures. Management must also prepare and submit an annual report on the effectiveness of internal controls, including those related to cybersecurity.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Documentation<\/h3>\n\n\n\n<p>Maintain comprehensive documentation of all SOX compliance activities, including financial reporting, internal controls, and cybersecurity measures. Make sure the documentation is readily accessible.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">External auditing<\/h3>\n\n\n\n<p>Hire an independent external auditor or certified public accounting firm to verify compliance with SOX requirements and provide an unbiased assessment of your organization&#8217;s financial reporting and internal controls.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Ongoing monitoring and improvement<\/h3>\n\n\n\n<p>Implement ongoing monitoring processes to ensure continuous compliance with SOX and assess the effectiveness of your internal controls, risk management processes, and operational efficiency related to financial reporting. Additionally, provide regular training and awareness programs on SOX requirements and cybersecurity best practices for employees.<\/p>\n\n\n\n<p>Syteca offers a comprehensive list of features to help your organization meet SOX requirements and secure your sensitive data. The platform enables your organization to <a href=\"\/en\/product\/privileged-access-management\" target=\"_blank\" rel=\"noreferrer noopener\">manage access to sensitive data<\/a>, <a href=\"\/en\/product\/user-activity-monitoring\" target=\"_blank\" rel=\"noreferrer noopener\">monitor user activity<\/a>, <a href=\"\/en\/product\/alerts-and-notifications\" target=\"_blank\" rel=\"noreferrer noopener\">respond to incidents<\/a>, and <a href=\"\/en\/product\/reports-and-statistics\" target=\"_blank\" rel=\"noreferrer noopener\">generate comprehensive reports<\/a> on user activity within your IT infrastructure.\u00a0<\/p>\n\n\n\n\t\t<div  class=\"block-a5a922ff-56ce-4468-9941-ea5073690a8c areoi-element container pattern-request-demo-2 rounded-bg-13px\">\n\t\t\t\n\t\t<div class=\"areoi-background  \">\n\t\t\t<div class=\"container-fluid\" style=\"padding: 0;\">\n\t\t\t\t<div class=\"row justify-content-start\">\n\t\t\t\t\t<div class=\"col \">\n\t\t\t            <div class=\"areoi-background__color\" \n\t                        \tstyle=\"background: rgba(71, 144, 235,0.15)\">\n\t                        <\/div>\n\n\t                    \n\n\t                    \n\n\t                    \n\t    \t\t\t<\/div>\n\t    \t\t<\/div>\n\t    \t<\/div>\n\t    <\/div>\n\t\n\t\t\t\n\n\t\t<div  class=\"block-956ebe2e-368e-4ac7-8ee2-a15583083abd row areoi-element align-items-center row-cols-md-2\">\n\t\t\t\n\n\t\t\t\n\n\t\t<div  class=\"block-9e962fe6-f77f-40f9-898c-abaef3f48ccb col areoi-element d-flex flex-wrap flex-column align-items-center align-items-md-start col-md-6\">\n\t\t\t\n\t\t\t\n\n<p class=\"has-text-align-left p-poppins pt-3 text-center text-md-start lh-sm has-text-color\" style=\"color:#1a3b4e;font-size:1.75rem;font-style:normal;font-weight:600\">Want to try Syteca? Request access<br>to the online demo!<\/p>\n\n\n\n<p class=\"has-text-align-left p-poppins pb-3 text-center text-md-start\" style=\"font-style:normal;font-weight:500\">See why clients from 70+ countries already use Syteca.<\/p>\n\n\n\n\t\t\t\t\n\t\t<button data-bs-target=\"#hsModal-demo\" data-bs-toggle=\"modal\" \n\t\t\t\n\t\t\tclass=\"block-9170fdac-8fec-4c73-a86c-338093dbf9d9 btn areoi-has-url position-relative me-lg-2  me-md-2 me-sm-2 me-lg-4 mb-3 hsBtn-demo btn-info  btn-info\"\n\t >\n\t\t\t\t\t\n\t\t\t\t\tAccess the Demo Portal \n\t\t\t\t\t\n\t\t\t\t\t \n\t\t\t\t<\/button>\n\t\t\t\n \n\t\t\t\n\t\t<\/div>\n\t\n\n\n\t\t<div  class=\"block-f840f051-f300-4ade-9e70-68d6c65e619d col areoi-element col-md-6 d-none d-sm-none d-md-block\">\n\t\t\t\n\t\t\t\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"369\" height=\"248\" src=\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2023\/06\/02014220\/Group-584.png\" alt=\"\" class=\"wp-image-24868\" srcset=\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2023\/06\/02014220\/Group-584.png 369w, https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2023\/06\/02014220\/Group-584-300x202.png 300w\" sizes=\"(max-width: 369px) 100vw, 369px\" \/><\/figure>\n\n \n\t\t\t\n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t\n \n\t\t<\/div>\n\t","protected":false},"featured_media":46801,"menu_order":0,"template":"","class_list":["post-46783","glossary","type-glossary","status-publish","has-post-thumbnail","hentry","glossary_category-compliance"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What Is SOX? | Syteca<\/title>\n<meta name=\"description\" content=\"What is SOX? Read our knowledge post and discover the definition of SOX, its benefits, and the key cybersecurity requirements to achieve SOX compliance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is SOX? | Syteca\" \/>\n<meta property=\"og:description\" content=\"What is SOX? Read our knowledge post and discover the definition of SOX, its benefits, and the key cybersecurity requirements to achieve SOX compliance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox\" \/>\n<meta property=\"og:site_name\" content=\"Syteca\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-19T09:44:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/10\/07065835\/OG-What-is-SOX_.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/10\/07065831\/OG-TW-What-is-SOX_.png\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox\",\"url\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox\",\"name\":\"What Is SOX? | Syteca\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/syteca_site_uploads.storage.googleapis.com\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/07065841\\\/banner-What-is-SOX_.png\",\"datePublished\":\"2024-08-27T12:45:00+00:00\",\"dateModified\":\"2024-11-19T09:44:08+00:00\",\"description\":\"What is SOX? Read our knowledge post and discover the definition of SOX, its benefits, and the key cybersecurity requirements to achieve SOX compliance.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox#primaryimage\",\"url\":\"https:\\\/\\\/syteca_site_uploads.storage.googleapis.com\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/07065841\\\/banner-What-is-SOX_.png\",\"contentUrl\":\"https:\\\/\\\/syteca_site_uploads.storage.googleapis.com\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/07065841\\\/banner-What-is-SOX_.png\",\"width\":1920,\"height\":601},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\\\/what-is-sox#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Glossary\",\"item\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Compliance\",\"item\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/glossary-category\\\/compliance\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"What Is SOX?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/\",\"name\":\"Syteca\",\"description\":\"Syteca | software to monitor privileged users and audit employee activity, detect insider threats, and protect servers in real time. Try a free demo now!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.syteca.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Is SOX? | Syteca","description":"What is SOX? Read our knowledge post and discover the definition of SOX, its benefits, and the key cybersecurity requirements to achieve SOX compliance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox","og_locale":"en_US","og_type":"article","og_title":"What Is SOX? | Syteca","og_description":"What is SOX? Read our knowledge post and discover the definition of SOX, its benefits, and the key cybersecurity requirements to achieve SOX compliance.","og_url":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox","og_site_name":"Syteca","article_modified_time":"2024-11-19T09:44:08+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/10\/07065835\/OG-What-is-SOX_.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_image":"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/10\/07065831\/OG-TW-What-is-SOX_.png","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox","url":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox","name":"What Is SOX? | Syteca","isPartOf":{"@id":"https:\/\/www.syteca.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox#primaryimage"},"image":{"@id":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox#primaryimage"},"thumbnailUrl":"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/10\/07065841\/banner-What-is-SOX_.png","datePublished":"2024-08-27T12:45:00+00:00","dateModified":"2024-11-19T09:44:08+00:00","description":"What is SOX? Read our knowledge post and discover the definition of SOX, its benefits, and the key cybersecurity requirements to achieve SOX compliance.","breadcrumb":{"@id":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.syteca.com\/en\/glossary\/what-is-sox"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox#primaryimage","url":"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/10\/07065841\/banner-What-is-SOX_.png","contentUrl":"https:\/\/syteca_site_uploads.storage.googleapis.com\/wp-content\/uploads\/2024\/10\/07065841\/banner-What-is-SOX_.png","width":1920,"height":601},{"@type":"BreadcrumbList","@id":"https:\/\/www.syteca.com\/en\/glossary\/what-is-sox#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Glossary","item":"https:\/\/www.syteca.com\/en\/glossary"},{"@type":"ListItem","position":2,"name":"Compliance","item":"https:\/\/www.syteca.com\/en\/glossary-category\/compliance"},{"@type":"ListItem","position":3,"name":"What Is SOX?"}]},{"@type":"WebSite","@id":"https:\/\/www.syteca.com\/en\/#website","url":"https:\/\/www.syteca.com\/en\/","name":"Syteca","description":"Syteca | software to monitor privileged users and audit employee activity, detect insider threats, and protect servers in real time. Try a free demo now!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.syteca.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.syteca.com\/en\/wp-json\/wp\/v2\/glossary\/46783","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.syteca.com\/en\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/www.syteca.com\/en\/wp-json\/wp\/v2\/types\/glossary"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.syteca.com\/en\/wp-json\/wp\/v2\/media\/46801"}],"wp:attachment":[{"href":"https:\/\/www.syteca.com\/en\/wp-json\/wp\/v2\/media?parent=46783"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}