I worked on an IT SoX project for a famous Silicon Valley networking company a couple years ago.
Each publicly-traded company ended up spending millions on SoX-compliance – more than anybody realized – for technical measures. The aim was to improve accountability and auditability of large companies after corporate meltdowns like Enron.
Yet here we are, a short time later, and Citibank and Merrill have had billions of dollars in losses, no succession plan, and little accountability to shareholders for reporting the losses in a timely manner.
I guess SoX did not go far enough in addressing the real problem – the human management component of corporate governance.
cnn.com: Prince Alwaleed: Why Chuck had to go
Citi’s giant write-downs: What did it know, and when did it know it?
cnn.com: Wall Street’s money machine breaks down
cnn.com: Airbus: Prince buys flying palace


