I work in a larger public company that needs to be Sarbanes Oxley compliant, but I don't see a ton of info out there on what that really boils down to for developers and pushing code live. Do changes just need to be approved before they go out? Is the access to make the change a violation or just the act of performing the change?
Also, we're working on a website, that while we generate revenue for our parent company, does not in any way control the direct financial reporting of it either. Does the fact that we had ads on our site that generate revenue mean we can impact financial reporting or is that not what the act is talking about?
How are you guys handling SOX compliance?