How can Sarbanes-Oxley help protect a company's information security?

Answer 1

That's a loaded question.

If you are talking about section 404 of the Sarbanes-Oxley act, if properly implemented, the Corporation should have the appropriate controls over information security in place. Those controls should be documented and tested.

Answer 2

Here's a link to the actual Sarbanes-Oxley act ..

http://fl1.findlaw.com/news.findlaw.com/hdocs/docs/gwbush/sarbanesoxley072302.pdf