SearchSecurity.com's SOX Security School

SearchSecurity.com's SOX Security School

Welcome to SearchSecurity.com's SOX Security School. In this free, multi-media Security School, guest instructor Richard Mackey shows you exactly what you need to do to meet SOX's ongoing demands and arms you with actionable items to ensure your business remains continuously compliant. This course consists of three lessons -- beginning with a SOX Scorecard and foundational article -- to help you see where your organization stands and help you understand the basics of SOX standards. Lesson 2 consists of one 60-minute webcast and three 15-minute quickcasts, and Lesson 3 offers three articles covering compliance-related technology. All of these resources are available on-demand, so you can learn at your convenience. As a bonus, through our agreement with (ISC)², all CISSP and SSCP webcast attendees are entitled to 1 CPE credit per webcast hour. (Click here for details)

   Course Outline
   Lesson 1: Gauging your SOX progress
   Lesson 2: Taking action
   Lesson 3: Understanding compliance-related technology
   Final exam
   About the Instructor

(IE only)
SCHOOL HIGHLIGHTS
Send the editor your feedback on this Security School

Learn about earning CPE credits

Visit our Security School for CISSP training

Visit our E-mail Security School

Visit our Web Security School

SPONSORED LINKS

IBM Tivoli white paper:
Compliance Management Solutions: Help Protect the Integrity of Your Business Through IT Governance and Compliance Management

  SOX Security School Course Outline



Lesson 1: Gauging your SOX progress
  • SOX Scorecard
    This multiple-choice scorecard walks you through a combination of fundamental and more subtle COBIT-related security requirements enabling you to judge where your organization stands in terms of meeting SOX's demands. You'll answer twenty questions -- five related to each of COBIT's four main security aspects: planning and organization, acquisition and implementation, delivery and support, and monitoring.
    GO TO THE SCORECARD

  • Article: SOX, security standards and building a compliance framework
    This article helps you understand the various security standards related to SOX compliance. You learn what these standards call for as well as how they relate to SOX and one another.
    READ THE ARTICLE



Lesson 2: Taking action




Lesson 3: Understanding compliance-related technology


Final Exam
After you've completed Lessons 1, 2 and 3, take the Final Exam to assess your knowledge of SOX based on what you've learned in this school.

TAKE THE FINAL EXAM

  About the Instructor

Richard Mackey, ISACA, CISM, Principal, SystemExperts is regarded as one of the industry's foremost authorities on distributed computing infrastructure and security. He has advised leading Wall Street firms on overall security architecture, virtual private networks, enterprise-wide authentication, and intrusion detection and analysis. He also has unmatched expertise in the OSF Distributed Computing Environment. Prior to joining SystemExperts, Mr. Mackey was the director of collaborative development for The Open Group (the merger of the Open Software Foundation and X/Open) where he was responsible for the integration of Microsoft's ActiveX Core with DCE and DCE Release 1.2. Mr. Mackey is an original member of the DCE Request For Technology technical evaluation team and was responsible for the architecture and defining the contents of DCE Releases 1.1 and 1.2. He has been a frequent speaker at major conferences and has taught numerous tutorials on developing secure distributed applications.

  

This was first published in February 2006