Re: Pre-Approved database changes

From: <jtesta_at_dmc-it.com>
Date: Fri, 18 Jun 2004 07:28:54 -0400 (EDT)
Message-ID: <63666.155.188.191.4.1087558134.squirrel@www.dmc-it.com>

Ahh the joys of being a consultant(and owner) of a small company :)

joe

Original message below

 On Thu, 2004-06-17 at 18:32, Michael Thomas wrote:  ...
 Sorry if I'm Sarbanes-Oakly ignorant and I've just  made it apparent. HTH.

 Yes, Mike, you have.

 I wish I could be.

 To answer the question that has been raised a  couple times regarding SarbOx and Change Control:

• Read COBIT or ITIL
• be a public company with >= $75M capitalization
• read up on SarbOx 404 and apply to IT control of financial systems * get audited ( this is key, and happens annually)
• consider the many places you fail the audit ( if you don't already have stringent controls, you will fail )
• learn something about the Capability Maturity Model
• discern what it takes to go from CMM Level 2 to level 4 ( in a few months )
• get used to it.

 Jared

---

Please see the official ORACLE-L FAQ: http://www.orafaq.com

---

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Fri Jun 18 2004 - 06:36:52 CDT