| Accounts Created | SOX 404 | Management assessment of internal controls. |
| Accounts Deleted | SOX 404; ISO 27002 - 11.1.1, 11.2.2, 11.4.6, 11.6.1 | Management assessment of internal controls; An access control policy should be developed and should state the access control rules and rights for all users and groups. Both logical and physical access controls should be used. |
| Accounts Modified | SOX 404 | Management assessment of internal controls. |
| Group Management | SOX 404; ISO 27002 - 11.1.1, 11.2.2, 11.4.6, 11.6.1 | Management assessment of internal controls; An access control policy should be developed and should state the access control rules and rights for all users and groups. Both logical and physical access controls should be used. |
| User Access to Compliance Systems - Top 25 | Sox 404; ISO 27002 -11.5.1 | Management assessment of internal controls.; All successful and unsuccessful logon attempts should be recorded. |
| Account Management | SOX 404 | Management assessment of internal controls. |
| Admin Access to Compliance Systems - Detail | Sox 404; ISO 27002 - 10.10.4 | Management assessment of internal controls; All activities by System Administrators and System Operators should be logged. |
| Admin Access to Compliance Systems - Top 25 | Sox 404; ISO 27002 - 10.10.4 | Management assessment of internal controls; All activities by System Administrators and System Operators should be logged. |
| Change in Audit Settings | SOX 404; ISO 15408-2 | Management assessment of internal controls; The system should ensure that security policy enforcement functions succeed before functions are allowed to proceed. |
| Access to Compliance Data - Detail | SOX 404 | Management assessment of internal controls. |
| Access to Compliance Data - Top 25 | SOX 404 | Management assessment of internal controls. |
| Logon Failures - Detail | SOX 404; ISO 27002 - 11.5.1 | Management assessment of internal controls; All successful and unsuccessful logon attempts should be recorded. |
| Logon Failures - Top 25 | SOX 404; ISO 27002 - 11.5.1 | Management assessment of internal controls; All successful and unsuccessful logon attempts should be recorded. |
Password Changes - Detail
Password Changes - Top 25 | SOX 404 | Management assessment of internal controls. |
| User Access Revoked | SOX 404; ISO 27002 - 11.2.1 | Management assessment of internal controls; Users who have changed jobs or left the organization should have their access rights removed immediately. |
| User Access to Compliance Systems - Detail | Sox 404; ISO 27002 -11.5.1 | Management assessment of internal controls.; All successful and unsuccessful logon attempts should be recorded. |
