The Sarbanes-Oxley Act in 2002 sets a number of rules on the corporate governance and responsibilities of public companies. Due to which Securities and Exchange Commission has set deadlines for compliance of 15th June 2004 for corporations with a total turnover of $75 million yearly and 15th April 2005 for smaller companies.

Sarbanes-Oxley Act emphasis more on reporting obligations from senior executives, auditors and securities analysts Essence of this act is to ensure CIA of financial data. This is present in the following:

• Section 103 - Auditing, Quality Control, And Independence Standards and Rules
  Requires maintenance of all audit-related records (including electronic) for 7 years.

• Section 302 - Corporate Responsibility For Financial Reports
  Requires CEO and CFO to certify the accuracy of corporate financial reports.

• Section 404 - Management Assessment Of Internal Controls
  Requires CEO, CFO and auditors to confirm the effectiveness of internal controls for financial reporting.

• Section 409 - Real Time Disclosure
  Requires any significant changes in financial state of issuer "on a rapid and current basis."

• Section 802 - Criminal Penalties For Altering Documents
  Requires retention and protection of audit and related documents, including electronic records.

• Section 906 - Corporate Responsibility For Financial Reports
  Requires CEO and CFO to certify the accuracy of corporate financial reports.

Secure Auditor™ a network based security auditing tool implies distinct methodologies to explore vulnerabilities in different operational systems, specially in finding application layer security vulnerabilities like deletion, modification and access control within the database.

Secure Auditor™ extends an important role in compliance to Sarbanes Oxley Act by providing detailed and in depth reports of vulnerabilities which could be exploited to gain access to the critical information stored on the network; hence mitigating the risk of attack.

Section 404 of this act entitled "Management Assessment of Internal Control", deals with the responsibility of company's management to maintain an internal control structure for financial data , reporting and to perform regular audits on this system. Secure Ora Auditor™ will go a long way in compliance with this Act as it is explicitly programmed to assess vulnerabilities and present a detailed report on application Layer security vulnerabilities which could be exploited for gaining access to the database servers.