The extension of the Sarbanes-Oxley Act (SOA) deadline is good news for overburdened IT managers in the Fortune 500, but they should use the borrowed time wisely, according to analyst firm Gartner Inc.
The SOA, passed in response to the scandals at Enron, WorldCom, et al., requires company managers to attest that they have established and maintain internal control over their companys financial reporting. Because so much of what goes into a companys financial reporting is tied to technology these days -- you have to query databases, inventory management systems, etc. -- then the IT manager has to figure out how to get specific information from a variety of sources in the IT infrastructure.
Section 404 of the SOA also requires IT managers to report material changes to the financial reporting process. So, for example, any major software system update in a companys IT infrastructure could require more compliance paperwork from the IT department.
Given all that background, its not surprising that the SOA deadline extension is particularly welcome relief for major corporations.
Heres how the deadlines have changed: Companies on an accelerated filing schedule -- meaning companies with a $75 million-plus market cap that have filed at least one annual report with the Securities and Exchange Commission (SEC) -- must now comply with the Act for their first fiscal year ending on or after November 15, 2004. The original deadline for accelerated filers had been June 15, 2004.
To realize the benefits of cloud-native software, an application must actually be cloud-native—designed to run in the cloud, interacting with disaggregated cloud services, fully manageable as code—to deliver the expected benefits.
By combining resources and expertise, the AI-Enabled ICT Workforce Consortium will offer a blueprint for how industries can adapt to an AI-dominated future.
IT leaders should heed the guidance of cybersecurity insurance providers who think businesses should prioritize security education, incident preparedness, regular internal audits, and ongoing vulnerability scanning and patching.
