Sarbanes-Oxley IT Compliance Using Open Source Tools, Second Edition

Early on in NuStuff Electronics they realized that obtaining Sarbanes-Oxley compliance was an entirely different matter then sustaining compliance. As we have discussed previously, NuStuff Electronics as a small to medium size company had minimal staff and therefore not only had issues with workload but also with segregation of duties. We as it was clear how automation tools could effectively help them by reducing the amount of activities that the staff need to perform, it was not readily clear as to how they were going to overcome the segregation of duties issue. In order to try and address the segregation of duties NuStuff Electronics investigated various open source tools, but was unable to find one that met their requirements. After looking at the various different open source tools, without having any success NuStuff Electronics decided to re-look at the open source tools they had implemented and there capabilities. It was during this process that NuStuff Electronics realized that although workflow did not have the capabilities that they need, with some code modification it could be tailored to work in a manner that would provide consistency, accountability, manageability and an audit trail. With this in mind NuStuff Electronics modified workflow in such manner as to allow approval of activities by other not in their IT organization and to create an audit trail of these activities. In conjunction with our previous recommendation, we would like to make another one as it relates to implementing open...