Most people know that all publicly traded companies in the United States must comply with the Sarbanes-Oxley Act of 2002. It is less well known that organizations that supply certain services to publicly traded companies also have Sarbanes-Oxley (SOx) obligations if those services might impact a public company’s financial reporting. Especially for small service providers, that can sound pretty scary. Whether your company is publicly traded or provides services to publicly traded companies, Concord Compliance’s comprehensive strategies, policies, and standards and our Practical Compliance Automation (PCA) platform can help to ensure that your information systems are compliant with SOx requirements. We’ve specially designed Concord Compliance and PCA to be comprehensive, yet practical and efficient, even for small organizations. Our compliance library directly maps to the COBIT framework for managing information systems; COBIT is the most widely used framework for assuring IT SOx compliance. In addition, we also map to other common frameworks, like ISO 27001 and NIST 800, to provide added confidence in your systems. Further, our PCA platform documents that you have been managing your compliance program and staying up to date with all required activities. Not only do we provide you with a system designed to support key compliance requirements, our system helps you easily prove to auditors that you are maintaining compliance over time. Taken together, Concord Compliance’s compliance programs and our Practical Compliance Automation software provide you with a foundation for passing audits and assuring your stakeholders that the services you provide are complying with Sarbanes-Oxley requirements.