This Introduction Guide to the Sarbanes-Oxley Body of Knowledge (SOXBoK) is the world's most comprehensive, authoritative compendium on Sarbanes-Oxley (SOX). Produced by SOX Institute, the leading provider of Sarbanes-Oxley research, education, certification, advisory and membership services for GRC (Governance, Risk Management and Compliance) professionals, the SOXBoK has been created by practitioners for practitioners. It covers all titles and sections of the Sarbanes-Oxley Act, and provides actionable advice for implementation using GASP (Generally Accepted SOX Principles). It is a must-have for anyone implementing SOX and similar regulations. It addresses the Finance, Accounting, Audit, IT, Ethics, Legal, Risk and other disciplines impacted by SOX. Includes the Act.

This Introduction Guide to the Sarbanes-Oxley Body of Knowledge (SOXBoK) is the world's most comprehensive, authoritative compendium on Sarbanes-Oxley (SOX). Produced by SOX Institute, the leading provider of Sarbanes-Oxley research, education, certification, advisory and membership services for GRC (Governance, Risk Management and Compliance) professionals, the SOXBoK has been created by practitioners for practitioners. It covers all titles and sections of the Sarbanes-Oxley Act, and provides actionable advice for implementation using GASP (Generally Accepted SOX Principles). It is a must-have for anyone implementing SOX and similar regulations. It addresses the Finance, Accounting, Audit, IT, Ethics, Legal, Risk and other disciplines impacted by SOX. Includes the Act.

Praise for Essentials of Corporate Governance "Mr. Anand's book is a practical study of the complicated issues surrounding the world of corporate governance. He includes excellent case studies and best practice solutions for improving governance programs within all types of organizations." -Chrisan Herrod V.P. Marketing and Business Development Compliance Spectrum "This book is a highly practical, accessible guide to post-Enron reforms and an essential resource for managers who want more than just to comply with SOX; this book will help them benefit from it." -Nell Minow Editor and cofounder The Corporate Library Written by Sanjay Anand, one of the world's leading corporate governance, risk management, and regulatory compliance experts, this simple-to-use book is designed with appreciation for demanding professional obligations, with information easy to find and at your fingertips. This professional guide's nuts-and-bolts presentation examines why corporate governance is important, to put you in a better position to understand its successful implementation for your organization. Essentials of Corporate Governance will challenge your concept of corporate governance and provide you with an understanding of: * The concept of governance * The competing goals that corporations may have * Why there is a call for corporations to be more ethical * The various forms of corporate structure * Corporate governance in emerging markets * Corporate governance within nonprofit organizations Communicating the idea of corporate governance as a process and an ideal rather than a set of criteria, this accessible and relevant book is the resource and reference guide you will turn to time and again for the knowledge you need to make corporate governance work for your corporation.

Providing a comprehensive framework for a sustainable governance model, and how to leverage it in competing global markets, Governance, Risk, and Compliance Handbook presents a readable overview to the political, regulatory, technical, process, and people considerations in complying with an ever more demanding regulatory environment and achievement of good corporate governance. Offering an international overview, this book features contributions from sixty-four industry experts from fifteen countries.

The issues, opportunities and challenges of aligning information technology more closely with an organization and effectively governing an organization s Information Technology (IT) investments, resources, major initiatives and superior uninterrupted service is becoming a major concern of the Board and executive management in enterprises on a global basis. An integrated and comprehensive approach to the alignment, planning, execution and governance of IT and its resources has become critical to more effectively align, integrate, invest, measure, deploy, service and sustain the strategic and tactical direction and value proposition of IT in support of organizations. Much has been written and documented about the individual components of IT Governance such as strategic planning, demand (portfolio investment) management, program and project management, IT service management and delivery, strategic sourcing and outsourcing, performance management and metrics, like the balanced scorecard, compliance and others. Much less has been written about a comprehensive and integrated IT/Business Alignment, Planning, Execution and Governance approach. This new title fills that need in the marketplace and gives readers a structured and practical solutions using the best of the best principles available today. The book is divided into nine chapters, which cover the three critical pillars necessary to develop, execute and sustain a robust and effective IT governance environment - leadership and proactive people and change agents, flexible and scalable processes and enabling technology. Each of the chapters also covers one or more of the following action oriented topics: demand management and alignment (the why and what of IT strategic planning, portfolio investment management, decision authority, etc.); execution management (includes the how - Program/Project Management, IT Service Management with IT Infrastructure Library (ITIL) and Strategic Sourcing and outsourcing); performance, risk and contingency management (e.g. includes COBIT, the balanced scorecard and other metrics and controls); and leadership, teams and people skills.

What is the importance of Sections 302 and 404? "Implementing" SOX using COSO and COBIT SOX's impact on foreign companies andnonprofits Achieving cost-effective sustainable compliance The evolving role of the SEC and the PCAOB Praise for ESSENTIALS OF SARBANES-OXLEY "Since its enactment in 2002, the Sarbanes-Oxley Act and its Section 404 internal control requirements have caused many a great deal of 'pain and suffering!' With its emphasis on what Sanjay Anand frequently reminds us is the 'real world,' this book should reduce some of that pain as it provides a practical and very realistic approach for an effective implementation of Sarbanes-Oxley internal control processes. The book has references to the new changes in auditing standards and emphasizes achieving sustainable compliance-practical and realistic approaches." —Robert R. Moeller, President, Compliance & Control Systems, Inc. "Sanjay Anand has provided what every busy executive needs, a concise overview of Sarbanes-Oxley Act essentials. His book is a terrific reference text that I recommend to anyone who needs to quickly understand the substance of the Act." —Scott Green, Chief Administration Officer Weil, Gotshal & Manges LLP "If you are looking to put together the various pieces-finance, accounting, audit, legal, IT, ethics-and understand the 'big picture' of the Sarbanes-Oxley Act, there is no other book like this. With 'Tips & Techniques' and 'In the Real World' examples, this book brings lively, practical, tangible, and compressible dimensions to a complex, multifaceted (and often dry) subject. This is essential reading for those new to the process and old hands going into their third and fourth years of SOX. It will also help those in other countries adopting SOX-like internal controls and regulations." —Dr. Anthony Tarantino, Governance, Risk, and Compliance Center of Excellence, IBM, Financial Services Sector, Silicon Valley and New York City Written by Sanjay Anand, one of the world's leading corporate governance, risk management, and regulatory compliance experts, this simple to use book is designed with appreciation for demanding professional obligations, with information always easy to find and at your fingertips. Essentials of Sarbanes-Oxley equips you with the knowledge you and all your company members need to initiate a SOX project, allocate a budget, and help your company achieve compliance.

The practical, authoritative guide for developing and managing an extraordinary internal audit function Internal audit managers charged with strengthening their departments and moving them into the future can turn with confidence to this complete turnkey procedures manual. Focusing on real-world examples and featuring an integrated audit management method-ology, Managing the Audit Function shows you step-by-step how to expertly set up, document, and streamline the activities of your audit department. The centerpiece of this manual is a system of unique audit management matrices that describe in practical detail each component of the audit function, from administration to performance to reporting. Each matrix speeds you to the establishment of structured policies and procedures for improving both the workflow efficiency and image of your audit department. With this updated and expanded Second Edition, you'll swiftly discover how to: * Improve the consistency, readability, and results of all documentation and reporting processes * Develop a well-written audit charter and policies attuned to your firm's operating circumstances * Implement a comprehensive personnel education and development program-complete with flowcharts and interviewing guidelines * Create a three-tier quality assurance program that produces consistent results and ongoing improvements

Modern IT managers are confronted with an overwhelming number of management frameworks, methods and methodologies - making it difficult to see the wood for the trees. In addition many IT service providers believe they can't be taken seriously if they don't also have a proprietary framework to offer - which makes it even more difficult to find your way through the framework forest. This itSMF publication covers the most important frameworks in use, in a neutral and objective way, so that readers can better understand the potential value of each instrument. Each framework is described by a well-known expert in that field, in a structured format, to emphasise the specific characteristics. A consistent approach to each chapter allows easy comparison between the instruments: a description of each framework, the origin/history, where the instrument is used, description and core graphics, approach/how to, relevance to IT management, strengths and weaknesses, cross-references/relationships and links and literature.

Are you exposing your business to IT risk, and leaving profit opportunities on the table? You might be if you are managing your IT risk using more traditional approaches. IT Risk, a new book based on research conducted by MIT s Center for Information Systems Research and Gartner, Inc., helps companies focus on the most pressing risks and leverage the upside that comes with vigilance. Traditionally, managers have grouped technology risk and funding into silos. IT Risk outlines a new model for integrated risk management, which identifies three core areas you can develop to eliminate the problems that silo strategies create. The authors also offer specific ways to make the most of your new found advantage. And because IT risk is the responsibility of all senior executives not just CIOs this book describes the tools and practices in language that general managers can understand and use. Named a top-ten managerial book of 2007 by CIO Insight magazine.