The Joy of SOX: Why Sarbanes-Oxley and Services Oriented Architecture May Be the Best Thing That Ever Happened to You
Hugh Taylor
- 出版商: Wiley
- 出版日期: 2006-04-03
- 定價: $1,575
- 售價: 2.5 折 $399
- 語言: 英文
- 頁數: 312
- 裝訂: Paperback
- ISBN: 0471772747
- ISBN-13: 9780471772743
-
相關分類:
企業資源規劃 Erp、管理與領導 Management-leadership、Information-management
立即出貨 (庫存 < 3)
買這商品的人也買了...
-
$780CMMI: Guidelines for Process Integration and Product Improvement (Harcover) -
Developing Series 60 Applications : A Guide for Symbian OS C++ Developers (Paperback)$2,150$2,043 -
ASP.NET 徹底研究進階技巧─高階技巧與控制項實作$650$507 -
Java 認證 SCJP 5.0 猛虎出閘$650$514 -
深入淺出 Hibernate$650$507 -
SQL Server 2005 資料庫開發聖經$890$757 -
How to Break Web Software: Functional and Security Testing of Web Applications and Web Services (Paperback)$2,150$2,043 -
鳥哥的 Linux 私房菜基礎學習篇, 2/e$780$702 -
Microsoft SQL Server 2005 設計實務$680$578 -
駭客攻防技術擂臺$520$442 -
Ajax 網頁程式設計─Google 成功背後的技術$580$493 -
Ajax 與 Google Map API 入門實作$450$351 -
最新 JavaScript 與 Ajax 範例活用辭典$390$304 -
ASP.NET 2.0 深度剖析範例集$650$507 -
SQL Server 2005 Reporting Services 報表服務實務應用$620$484 -
Visual Basic 2005 完全探索$550$468 -
Dreamweaver 搞不定的網頁設計效果：CSS 關鍵救援密碼$520$442 -
操作介面設計模式 (Designing Interfaces)$880$695 -
全功能 XOOPS 2.2 架站機速習講座$480$379 -
新一代 ASP.NET 2.0 網站開發實戰－使用 C# 以及 VB2005$580$522 -
Effective C++, 3/e (中文版) (Effective C++: 55 Specific Ways to Improve Your Programs and Designs, 3/e)$500$450 -
Ajax 技術手冊 (Foundations of Ajax)$450$356 -
世紀末軟體革命復刻版：C++、GUI 與物件導向理論$620$558 -
圖解王-學會圖解式思考與製圖技術$420$328 -
Ajax 快速上手 (Head Rush Ajax)$780$616
商品描述
Description
- The Sarbanes-Oxley Act (SOX) was passed in 2002 in response to a series of high-profile corporate scandals and requires that public companies implement internal controls over financial reporting, operations, and assets; these controls depend heavily on installing or improving information technology and business methods
- Written by one of the most visible personalities on the tech-biz side of the SOX discussion, this highly readable, engaging book provides a clear road map for integrating SOX compliance into the fabric of everyday IT infrastructure and business practice
- Shows the reader how to leverage and use service-oriented architecture (SOA), a set of technologies that enables interoperation of heterogeneous computer systems, to achieve the level of internal controls over IT that SOX mandates
Table of Contents
Acknowledgements.
Introduction.
Part 1: The SOX Paradox.
Chapter 1: The Trouble with DexCo.
The Curse of the Adequate Performer.
A Functioning Mess.
Financials.
Hidden Time Bombs.
Summary.
Chapter 2: Agility: The Do or Die Mandate.
New Blood, New Operating Environment.
Moving Targets.
Partnerships.
Rapid Market Cycles.
Technology Shifts.
M&A.
Retail Consolidation.
Regulatory Shift.
Betting the Company.
Outsourcing.
Agility for DexCo.
The Wilde Plan.
Summary.
Chapter 3: Ramifications of SOX 404.
SOX 404—Definition and Context.
SOX 404 and the Audit Process.
COSO at DexCo.
Control Objectives.
Control Components.
Control Environment.
Risk Assessment.
Control Procedures.
Information and Communication.
Monitoring.
Why Linda Is Freaking Out.
Summary.
Chapter 4: Between SOX and a Hard-Coded Place.
Internal Controls and Business Processes.
Internal Controls and Information Technology.
Control Points.
Interdependent Controls.
The FAST Track to a Control Breakdown.
Broken Control Points.
Summary.
Chapter 5: Commit to COBIT?
This Is a High Stakes Game.
Strong Medicine: COBIT.
COBIT: Where IT Enables Controls.
Components of COBIT.
COBIT and Sarbanes Oxley.
COBIT in Depth: The DS 11 Process.
Control Statements.
Key Goal Indicators.
Key Performance Indicators.
Critical Success Factors.
Maturity Models.
Implications of DS 11’s Maturity Scale.
Summary.
Chapter 6: COBIT for Mere Mortals.
The 80/20 Heat Map.
COBIT Implementation.
Finding the Hot Areas for COBIT.
Deep Dive—Maturity of COBIT in a Hot Area.
Deeper Dive—COBIT Issues for a Specific Function.
Deep Dive—Circle Back to COSO.
COBIT and People.
Paying the Tab for COBIT.
DexCo’s Next Steps on COBIT.
Summary.
Chapter 7: The Pain of SOX.
COSO, COBIT, and Controls versus the Wilde Plan.
Flex-acturing.
Distribution.
Marketing.
Organizational Changes.
The Lose-Lose-Lose Proposition.
Think Globally but Act Recklessly.
Comply and Die.
The Remediation Doom Loop.
Non-Compliance Penalties.
Jim’s Big Question.
Summary.
Part II: Thinking Outside the SOX.
Chapter 8: What If?
Back at the Ranch.
Defining Agile Compliance.
Compliance as a Driver of Positive Change.
It’s Happened Before.
Summary.
Chapter 9: The Technology of Agile Compliance.
Living Up to Potential.
The Four Questions.
Mapping Business Process and IT Architecture.
Contractual Relationships.
Process Flow.
IT Architecture.
Is Flex-Acturing Under Control?
Will It Flex?
Answering Dale’s Questions.
What It Will Take to Flex.
Summary.
Chapter 10: The Organization of Agile Compliance.
Challenges to the Agile, Compliant Organization.
Tone at the Top Revisited.
The Accounting Organization.
The IT Organization.
Territoriality, Silos, and Culture.
Requirements for an Agile, Compliant Organization.
Summary.
Chapter 11: The Walk-Through.
Dale’s Need for an Overview.
Agile Compliance—The IT Plan.
Business Process Modeling and BPEL.
Unified Online Workspace.
Centralized User Management.
Application Development and Integration Process.
Agile Compliance and IT—The Sum of Its Parts.
Agile Compliance—The Organizational Plan.
The Agile Compliance Process Plan.
Troubleshooting.
Summary.
Chapter 12: The Pay Off.
Investing in Agile Compliance.
Return on Agile Compliance Investment.
Lower Cost of Compliance.
Operational Savings.
Agility.
Realizing the Wish List.
Summary.
Part III: Actually Doing It—For Real.
Chapter 13: IT Solutions for Agile Compliance.
Defining SOA.
Enterprise Service Bus.
SOBA.
On-Demand Software.
The Promise of SOA for Agile Compliance.
Even a Magic Bullet Can Kill You.
Summary.
Chapter 14: SOX Software.
Taxonomy of SOX Packages.
Shared Workspace.
Documentation Management.
Financial Coordination.
Exception Monitoring .
Internal Controls Modules.
Realizing the Potential of SOX Software.
Putting the SOX Packages into a Compliance Architecture.
SOX Packages and the DexCo Agile Compliance Plan.
Summary.
Chapter 15: FAST or Slow?
SOA for DexCo’s Agile Compliance.
The Agile Compliance Scorecard.
Scoring the Business Processes.
The Next Level: Scoring the Systems.
Back to Reality.
Summary.
Chapter 16: Conclusion.
Consensus.
The Future .
Appendix A: Glossary.
Appendix B: Resources.
Government Bodies and Organizations.
Audit Firms and Analysts That Publish Sarbanes Oxley Research.
Online Resources.
Bibliography.
Books.
Articles.
Reports and White Papers.
Index.
商品描述(中文翻譯)
描述
《薩班斯-奧克斯利法案》（SOX）於2002年通過，作為對一系列引人注目的企業醜聞的回應，要求上市公司在財務報告、運營和資產方面實施內部控制；這些控制在很大程度上依賴於安裝或改進信息技術和業務方法。
這本易讀且引人入勝的書由SOX討論中最具知名度的技術商業人物之一撰寫，為將SOX合規整合到日常IT基礎設施和業務實踐中提供了清晰的路線圖。
本書向讀者展示如何利用面向服務的架構（SOA），這是一套使異構計算機系統互操作的技術，以實現SOX要求的IT內部控制水平。
目錄
致謝。
引言。
第一部分：SOX的悖論。
第1章：DexCo的麻煩。
充足表現的詛咒。
一團亂糟糟的功能。
財務狀況。
隱藏的定時炸彈。
總結。
第2章：敏捷性：生死命令。
新鮮血液，新的營運環境。
移動目標。
合作夥伴關係。
快速市場周期。
技術轉變。
併購。
零售整合。
監管轉變。
賭上公司。
外包。
DexCo的敏捷性。
Wilde計劃。
總結。
第3章：SOX 404的影響。
SOX 404-定義和背景。
SOX 404和審計過程。
DexCo的COSO。
控制目標。
控制組件。
控制環境。
風險評估。
控制程序。
信息和溝通。
監控。
為什麼琳達感到恐慌。
總結。
第4章：在SOX和一個硬編碼的地方之間。
內部控制和業務流程。
內部控制和信息技術。
控制點。
相互依賴的控制。
控制失效的快速通道。
