The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the concepts presented in this chapter and to assist you with real-life implementation of these concepts. To have your questions about this chapter answered by the author, browse to www.syngress.com/solutions and click on the Ask the Author form. You will also gain access to thousands of other FAQs at ITFAQnet.com.

Q: What if an executive management or IT customer won t accept the changes need to comply with SOX?

A: Unfortunately, the odds will be great that your company will not obtain SOX compliance.

Q: Why is the Delivery and Support Domain so important?

A: From a SOX perspective, this domain affords the greatest opportunity to reposition an IT Department.

Q: Will my auditor require workflow diagrams?

A: No, but they will require documentation, and since workflows make great documentation and you will need to develop them for your processes anyway, you might as well use them for documentation purposes.

Q: The budget process at my company has been completed for this year. What should I do?

A: Ensure that funding for any additional resources is still stipulated in your SLA, and then negotiate with Executive Management or the customer for the additional funding.

Q: Are formal SLAs really necessary? Where can I find more information on writing effective SLAs?

A: The simple answer is yes.