The SOX Act has been around for five years now and many of you have probably spent numerous hours trying to define and implement a rigorous security plan. Because you need to expose your internal control strategy to an outside auditor on an annual basis, the most successful strategies will be based on the notion of sustainable compliance.