Sarbanes-Oxley IT Compliance Using Open Source Tools-Second Edition, 2/e

The Sarbanes-Oxley Act (officially titled the Public Company Accounting Reform and Investor Protection Act of 2002), signed into law on 30 July 2002 by President Bush, is considered the most significant change to federal securities laws in the United States since the New Deal. It came in the wake of a series of corporate financial scandals, including those affecting Enron, Arthur Andersen, and WorldCom. The law is named after Senator Paul Sarbanes and Representative Michael G. Oxley. It was approved by the House by a vote of 423-3 and by the Senate 99-0.

This book illustrates the many Open Source cost-saving opportunities that public companies can explore in their IT enterprise to meet mandatory compliance requirements of the Sarbanes-Oxley act. This book will also demonstrate by example and technical reference both the infrastructure components for Open Source that can be made compliant, and the Open Source tools that can aid in the journey of compliance. Although many books and reference material have been authored on the financial and business side of Sox compliance, very little material is available that directly address the information technology considerations, even less so on how Open Source fits into that discussion.

The format of the book will begin each chapter with the IT business and executive considerations of Open Source and SOX compliance. The remaining chapter verbiage will include specific examinations of Open Source applications and tools which relate to the given subject matter, and last a bootable ?live? CD will have fully configured running demonstrations of Open Source tools as a valuable technical reference for implementation of the concepts provided in the book

* Only book that shows companies how to use Open Source tools to achieve SOX compliance, which dramatically lowers the cost of using proprietary, commercial applications.
* Only SOX book with a bootable-Linux CD containing countless applications, forms, and checklists to assist companies in achieving SOX compliance.
* Only SOX compliance book specifically detailing steps to achieve SOX compliance for IT Professionals.

《薩班斯-奧克斯利法案》（正式名稱為《2002年公眾公司會計改革和投資者保護法案》）於2002年7月30日由布什總統簽署成為法律，被認為是自新政以來美國聯邦證券法最重大的改變。該法案是在一系列企業財務醜聞（包括恩隆、安達信和世通公司）之後出台的。該法案以參議員保羅·薩班斯和眾議員邁克爾·奧克斯利的名字命名。該法案在眾議院以423-3的投票通過，在參議院以99-0的投票通過。

本書介紹了公眾公司在其IT企業中可以探索的許多開源節省成本的機會，以滿足《薩班斯-奧克斯利法案》的強制合規要求。本書還通過實例和技術參考展示了開源基礎設施組件如何達到合規，以及開源工具如何在合規過程中提供幫助。儘管有許多關於Sox合規的財務和商業方面的書籍和參考資料，但很少有直接涉及信息技術考慮的資料，更不用說開源如何融入該討論了。

本書的格式將以IT業務和高管對開源和SOX合規的考慮作為每章的開始。其餘章節將具體探討與特定主題相關的開源應用程序和工具，最後一個可啟動的“現場”CD將完全配置運行開源工具的演示，作為實施本書提供的概念的有價值的技術參考。

* 本書是唯一一本展示公司如何使用開源工具實現SOX合規的書籍，從而大幅降低使用專有商業應用程序的成本。
* 本書是唯一一本具有可啟動Linux CD的SOX合規書籍，其中包含無數應用程序、表格和檢查清單，以幫助公司實現SOX合規。
* 本書是唯一一本專門詳細介紹IT專業人士實現SOX合規步驟的SOX合規書籍。