Task:
Under Sarbanes-Oxley 2002 regulations, which companies or industries are required to have internal controls for computer access? Which companies or industries are not required to follow these regulations? Would you recommend that companies that are not obligated by the law still follow the computer access portion of the regulation? Explain why or why not.
Why is it important to understand the boundary conditions - scope, time, and cost of any information systems project?