SOX Question

I'm sure this is everyone's most favorite subject: SOX.

I'd like to throw this out to everyone and see how your company handles a situation like this.

We have our 'change management' system. When someone needs a new table/view/package/data fix, etc... created or modified, we have to go through the change management process. One thing that strikes me as odd here is that people are allowed to submit change requests and also approve them. Doesn't that go against everything that SOX rules were created for? SOX (in a change management sense) is all about accountability and openness of someone's actions. So is it 'correct' for someone to submit and approve changes? Shouldn't the approver and submitter be different?

Thoughts, ideas, comments?

Frustrated in Florida,

Jeremy

Consider the environment. Please don't print this e-mail unless you really need to.

--
http://www.freelists.org/webpage/oracle-l