IT Braces for 'J-SOX' Rules

jcatcw writes to mention that Japan-based businesses are prepping for new requirements, called J-SOX, similar to Sarbanes-Oxley in the United States. Even though details are not expected until next month, many IT managers are already working on implementing controls to handle the expected regulations. "Marios Damianides, an IT risk management consultant and partner at Ernst & Young LLP in New York, said he expects that the relaxation of some Sarbanes-Oxley requirements by the Public Company Accounting Oversight Board in the U.S. late last year should help ensure that the J-SOX rules won't be excessive for businesses."

FAQ from a company called Protiviti

[sczimme]

There is a J-SOX* FAQ here [protiviti.jp]. Note: this is a PDF. I have no affiliation w/ the company.

* "J-SOX"? I suppose it makes sense, but sounds too much like "J-pop".

I am starting to work with J-SOX in the UK

[dominux]

for a Japanese company obviously. The thing you need to know is that the law itself is impenetrable in the US and Japan. Don't worry about it. Look for the document from COSO on internal controls (nasty - send this to the accounts department) and the COBIT framework (nice - keep this one in IT) COBIT is really really friendly and structured (34 chapters with loads of specific guidance on each), if you have been working with ISO 9000 and related things then you are going to like COBIT. COSO is woolly and unstructured, it sort of breaks down into 4 elements and J-SOX adds an extra one for IT controls, which as I understand it, probably just means that to do COSO you need to do COBIT.
Just remember when they are handing out the responsibilities:
COBIT = nice
COSO = nasty

Re:Comment anonymous for obvious reasons...

[onkelonkel]

flouting - the word you want is flouting. Flout - "to contemptuously disregard: flout the rules" Flaunt - "to display ostentatiously: he liked to flaunt his wealth by lighting a cigar with a fifty dollar bill"

English is tricky.