Re: SOA in a SOX compliant environment
I think the author of the linked article is being paranoid. The situation of SOX/SOA is similar to running anti-virus on a machine connected to internet. The risk is there if you don't take any action. A systematic, informed approach to implementation is required to achieve this. Our organization is using a similar approach since the SOX was enforced on the US listed companies in 2005.