In my previous job I was involved with IT of large corp and here is explanation I got:
Yes it is false but SOX does call for strict internal controls on financial information. Which means that password rotation is necessary so that people who are not anymore allowed to access information does not have access to these information any more. Thus password rotation is required.
I and my IT friends could be 100% wrong here but this is how these SOX vague requirements will be translated to IT admins.
Yes it is false but SOX does call for strict internal controls on financial information. Which means that password rotation is necessary so that people who are not anymore allowed to access information does not have access to these information any more. Thus password rotation is required.
I and my IT friends could be 100% wrong here but this is how these SOX vague requirements will be translated to IT admins.