IT security is a fundamental underpinning for Sarbanes – Oxley (SOX) compliance. The ISACA document IT Control Objectives for SOX defines prescriptive measures for security compliance.

Many organizations undertake compliance under the direction of their advisors only as far as processes. Often they neglect technical IT security. ERE addresses this problem by identifying all SOX compliance gaps with regard to IT security and by finding the security vulnerabilities that actually exist in an organization's network. Then ERE provides clear action steps in the form of recommendations for their remediation.

Additional Resources
http://www.isaca.org/