Sarbanes-Oxley Section 302 and and Section 906 requires that the CEO and CFO certify the accuracy of the company’s financial statements. An erroneous certification could result in criminal and civil penalties. The essence of the certifications is similar and some organizations require that the Chief Information Officer and other members of management to sign employee subcertifications.

Although the Sarbanes-Oxley Act of 2002 does not specifically require Chief information officers to certify the company's financial information, CIO's need to monitor the enterprise processes for auditing and reporting financial information and transactions as Information Technology IT has and important relationship to the company's financial reporting system.

Back to: Sarbanes Oxley CobiT  Forward to: Sarbanes-Oxley Compliance