Experts agree that making IT governance work in a Sarbanes–Oxley world is a challenging yet essential undertaking for companies. "Successful corporate leaders must strive to do the right thing in disclosure, in governance, and otherwise in their businesses. And they must instill in their corporations this attitude of doing the right thing. Simply complying with the rules is not enough. They should make this approach part of their companies? DNA. For companies that take this approach, most of the major concerns about compliance disappear." ?William H. Donaldson, former chairman U.S. Securities and Exchange Commission "Making IT Governance Work in a Sarbanes–Oxley World means first of all that the privacy of the managerial hierarchy must be displaced by distributed information flows that are visible, accessible, and comprehensible to all. When everybody knows everything you?re doing, it?s just not possible to remain insulated and self–serving. Second, it requires new...
