SOX Question

  • From: "SHEEHAN, JEREMY" <Jeremy.Sheehan@xxxxxxx>
  • To: "oracle-l@xxxxxxxxxxxxx" <oracle-l@xxxxxxxxxxxxx>
  • Date: Tue, 2 Jun 2009 14:20:20 -0400

Hey folks,

I'm sure this is everyone's most favorite subject: SOX.   

I'd like to throw this out to everyone and see how your company handles a 
situation like this.

We have our 'change management' system.   When someone needs a new 
table/view/package/data fix, etc... created or modified, we have to go through 
the change management process.  One thing that strikes me as odd here is that 
people are allowed to submit change requests and also approve them.  Doesn't 
that go against everything that SOX rules were created for?  SOX (in a change 
management sense) is all about accountability and openness of someone's 
actions.  So is it 'correct' for someone to submit and approve changes?  
Shouldn't the approver and submitter be different?  

Thoughts, ideas, comments?  

Frustrated in Florida,

Jeremy

Consider the environment. Please don't print this e-mail unless you really need 
to.

--
//www.freelists.org/webpage/oracle-l


Other related posts: