The Sarbanes-Oxley Act of 2002 (SOX) and associated rules adopted by the Securities and Exchange Commission (SEC) require certain businesses to report on the effectiveness of their internal controls over financial reporting. Companies that must comply with Sarbanes-Oxley include U.S. public companies, foreign filers in U.S. markets and privately held companies with public debt. U.S. companies with market value greater than $75million.
Companies should consult legal counsel and accounting professionals for specific advice. This includes federal, state and local laws and regulations, as it relates to SOX. Internal controls covered by Sarbanes Oxley relates to email and document archiving.
Some things to consider when implementing a Sarbanes Oxley compliant archiving system:
* Policies should include email users taking ownership of sending selected e-mail messages to an archive mailbox. Certainly this depends on judgment calls and ongoing behavior of every staff person during a business day.
* Company management must commit to an ongoing investment in training, supervision, monitoring and enforcement of email and document archiving policies.