Congress passed the Sarbanes-Oxley Act of 2002 partially in response to the Enron scandal of 2001 and the WorldCom scandal of 2002.', moreInfo : 'What is the Sarbanes-Oxley Act? A definition from Whatis.com' }, { text : 'Which of the following has surpassed compliance as the top GRC priority at most organizations, according to a report from AMR Research?', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. SOX requirements', 'B. Governance', 'C. Risk management', 'D. HIPAA requirements' ], answer : 2, score : 1, expandedAnswer : '
Companies are still concerned about regulatory compliance, according to AMR Research, but several major data breaches have many organizations putting risk management at the top of their lists.', moreInfo : 'Risk management surpasses compliance as top GRC priority' }, { text : 'Which of the following methods is one of the most effective ways to destroy unwanted data, according to Jay Heiser, an analyst with Stamford, Conn.-based Gartner?', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. Degaussing', 'B. Encrypting and discarding', 'C. Overwriting', 'D. Burning' ], answer : 0, score : 1, expandedAnswer : '
Degaussing is a technique that involves exposing magnetic data sources to strong magnetic fields to destroy all data. Encrypting, discarding, overwriting and burning can all leave traces of sensitive data.', moreInfo : 'Data destruction requires more than just encryption' }, { text : 'In February of 2008, which vendor released a compliance warehouse appliance for unstructured content?', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. IBM', 'B. Oracle', 'C. Cognos', 'D. Microsoft' ], answer : 0, score : 1, expandedAnswer : '
IBM released the IBM Compliance Warehouse for Legal Control in February of 2008. The warehouse features Cognos-based dashboards and technology (IBM bought Cognos in early February).', moreInfo : 'IBM releases compliance warehouse for unstructured content' }, { text : 'Adherence to which organization\'s framework may help companies comply with SOX requirements?', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. Committee of Organizational Open Legislation (COOL)', 'B. Committee of Sponsoring Organizations of the Treadway Commission (COSO)', 'C. Committee of Document Maintenance (CDM)', 'D. Committee of Governance and Compliance Standards (CGCS)' ], answer : 1, score : 1, expandedAnswer : '
The Committee of Sponsoring Organizations of the Treadway Commission (COSO) is a private-sector initiative formed in 1985, according to its website, Coso.org. The committee has an established framework against which organizations can measure their compliance to SOX. (All those other committee names are made up -- as evidenced by the Committee of Organizational Open Legislation, whose acronym spells, well...COOL.)', moreInfo : 'Committee of Sponsoring Organizations of the Treadway Commission (COSO) website' }, { text : 'Fill in the blank: "Sarbanes was the genesis of this whole _______ concept. People now take it very seriously," according to John Hagerty, vice president and research fellow at Boston-based AMR Research.', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. Credit, operational and market risk', 'B. Governance, risk and compliance', 'C. Basel II', 'D. Content management' ], answer : 1, score : 1, expandedAnswer : '
John Hagerty\'s complete quote was: "One of the things that Sarbanes did is it really raised the awareness of compliance activities in general. Sarbanes was the genesis of this whole governance, risk and compliance (GRC) concept. People now take it very seriously."', moreInfo : 'Sarbanes-Oxley four years later: Governance, risk and compliance now demands a comprehensive approach' }, { text : 'AMR Research predicts that spending on GRC will reach what amount in 2008?', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. $32 billion', 'B. $10 billion', 'C. $1 billion', 'D. $850 million' ], answer : 0, score : 1, expandedAnswer : '
In March of 2008, AMR Research predicted that GRC spending would increase 7.4% from 2007, reaching $32 billion.', moreInfo : 'Sarbanes-Oxley four years later: Governance, risk and compliance now demands a comprehensive approach' }, { text : 'All of the following represent one of the 11 titles of Sarbanes-Oxley EXCEPT:', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. Corporate Responsibility', 'B. Studies and Reports', 'C. White Collar Crime Penalty Enhancement', 'D. Auditor Dependence' ], answer : 3, score : 1, expandedAnswer : '
We got tricky with the answer options here. Corporate Responsibility, Studies and Reports, and White Collar Crime Penalty Enhancement are all official titles of the Sarbanes-Oxley Act. Answer option D, Auditor Dependence, is not a title – but Auditor Independence is.', moreInfo : 'The 11 titles of Sarbanes-Oxley' }, { text : 'Which of the following is NOT recommended for meeting SOX compliance requirements, according to compliance expert Michael Rasmussen?', img : 'http://media.techtarget.com/WhatIs/images/spacer.gif', responses : [ 'A. Technologies with integrated content capabilities', 'B. Technologies with workflow capabilities', 'C. GRC platforms', 'D. Spreadsheets' ], answer : 3, score : 1, expandedAnswer : '
Manual spreadsheet-based processes do not have the levels of authentication, access control or audit trail necessary to meet SOX compliance requirements, according to Michael Rasmussen.', moreInfo : 'Sarbanes-Oxley compliance: GRC technology vs. spreadsheets' }, { text : 'Which of the following are essential components of a compliance technology toolbox, according to analysts quoted in a SearchDataManagement.com article?\n\n
While unstructured data management may be part of an overall compliance strategy, it is not one of the specified critical components of compliance software, according to industry analysts.', moreInfo : 'Compliance software essentials: Build a technology toolbox' } ] };