Question: Under Sarbanes-Oxley regulations, which companies or industries are required to have internal controls for computer access? Which companies or industries are not required to follow these regulations? Would you recommend that companies, which are not obligated by the law, follow the computer access portion of the regulation follow it? Why or why not?