SOX Compliance of Alfresco?

[abhishek385]

Hi All,

Does any body have information regarding the SOX compliance of Alfresco. Incase it is not SOX compliant do we have any Open source DMS built over Alfresco which is SOX compliant.
Please let me know if we have any reference to the above mentioned so, we can study the customizations made in order to achive the compliance so, it can be used for financial applications as a document repository.

Thanks a lot.

[mrogers]

I'm not exactly sure what you mean by SOX compliant.     I understand that SOX is all about corporate accountability.   So at the end of the day it will be your company's policies and procedures (and proving you follow them) that determine your SOX compliance.  Alfresco can be a valuable part of your IT solution by providing features for example security, auditing, workflow, document management, the list goes on…

But at the end of the day it will be your company's policies and procedures that ensure SOX compliance not the IT systems.

Alfresco is committed to go through DOD 5015.2 accreditation this Summer.     Are there any other standards you are specifically interested in?

[zaizi]

Reiterate what Mark said. SOX does not specifically list a set of requirements that a DMS has to meet. The processes and thus the solutions an organisation puts in place to comply with SOX will vary between organisations.

We are working on making Alfresco compatible with MoReq2 (Model Requirements Specification for the Management of Electronic Records) for our public sector clients (EU's equivalent of DOD 5015.2). The functionality built for this can be used to address financial and accounting audit requirements as well. We are doing just that for a financial services client.

To answer your question, it is very likely you'll be able to use Alfresco to meet your SOX compliance requirements. No, there are no public reference implementations. Contact us if you want to talk through your requirements in detail.

Alternatively, you can look at Alfresco's Records Management Module to what is possible with Alfresco: http://wiki.alfresco.com/wiki/Records_Management_User_Guide