Educause Security Discussion mailing list archives

Re: Does the Sarbanes-Oxley Act apply to Higher Ed too?


From: Melissa Guenther <mguenther () COX NET>
Date: Mon, 29 Sep 2003 09:05:22 -0700

Interesting article relating to just this

http://www.pwcglobal.com/extweb/newcolth.nsf/docid/08F02B1B23D455E385256C9C00679322
----- Original Message -----
From: "Clyde Hoadley" <hoadleyc () MSCD EDU>
To: <SECURITY () LISTSERV EDUCAUSE EDU>
Sent: Monday, September 29, 2003 8:50 AM
Subject: [SECURITY] Does the Sarbanes-Oxley Act apply to Higher Ed too?


I know several institutions of Higher Education were taken off guard by
Gramm-Leach-Bliley.  Does the Sarbanes-Oxley Act apply to Higher Ed too?
If so, how?

   Title: Security and Sarbanes-Oxley
    Source:   SearchSecurity
    Date Written:  September 25, 2003
    Date Collected: September 26, 2003
The Sarbanes-Oxley Act, which was signed into law by President Bush on
July
30, 2002 and will take effect in 2004 and 2005, was meant to deal with a
variety of corporate governance issues, making upper management
accountable
for a company's actions. A by-product of the Act may be to involve senior
management in information security. Under the Act, CEOs and CFOs are
mandated
to attest that their companies have proper "internal controls" in place.
Internal controls are widely interpreted to include adequate data and
network
security, thereby forcing senior executives to sign off on IT security
issues.
Security product vendors view the Act as an opportunity to sell their
wares,
but no single product currently exists that guarantees compliance. In the
long
term, the Act may help improve security, testing and awareness.


http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci929451,00.html



--
Clyde Hoadley
Security & Disaster Recovery Coordinator
Division of Information Technology
Metropolitan State College of Denver
hoadleyc () mscd edu
http://clem.mscd.edu/~hoadleyc/
(303) 556-5074

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.


**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: