Your going to need to write policy mainly for this, then go through some
sort of certification and accreditation, where your responsible parties
(mainly C level exec types, board members) claim that they accept the risk
and that there are appropriate controls in place to mitigate (not prevent,
as there is no statistical full prevention) the noted risks.


The financial aspect is killer from what I understand, but I have only
looked into from a security perspective.


Document, document, document.

--
Timothy Heald
Web Portfolio Manager
Overseas Security Advisory Council
U.S. Department of State
571.345.2319

The opinions expressed here do not necessarily reflect those of the U.S.
Department of State or any affiliated organization(s).  Nor have these
opinions been approved or sanctioned by these organizations. This e-mail is
unclassified based on the definitions in E.O. 12958.

-----Original Message-----
From: dana tierney [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 19, 2004 4:37 PM
To: CF-Community
Subject: sarbanes-oxley

While I am having federal compliance nightmares, anyone have any info on how
sarbanes-oxley applies to non-profits? As best I can see we are exempt from
a lot of the stricter audit requirements but board member need to manifest
"fiduciary responsibility".... I love stuff like this when I am already
sleep deprived <g>
  _____
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to