Achieving and maintaining compliance with the general IT controls specified in Section 404 of Sarbox involves far more than just establishing rigid control over various processes and access to information. It requires merging people, processes and technology into a unified, enterprise-wide compliance effort.
This white paper from BMC Software discusses these topics and how to use technology to help meet General IT Control Objectives.