posted on Monday, December 11, 2006 10:42 AM by marathonsqlguy

Sarbanes-Oxley and Data Dude

I've been a bit buried lately with Sarbanes-Oxley requirements. In the last couple of weeks I've written new company policies on Data Integrity and Whistleblowing, as part of the effort to get everything documented by December 15.

One of the other requirements was to get all our production databases documented. This can be a daunting task, but fortunately the new Visual Studio Team System for Database Professionals (Data Dude) came out. I spent two solid days last week pointing Data Dude to each of my production databases and created a Database Project for each one. Because the database project is coded as a set of .sql files it qualifies as valid documentation under our Sarbanes-Oxley guidelines. I added all these projects to our source control system and that requirement is satisfied, and so am I.

Thanks to everybody on the Data Dude team for making my job easier!

Allen

Comments

# re: Sarbanes-Oxley and Data Dude @ Wednesday, December 13, 2006 2:19 PM

Ok, maybe this will be boring to some readers, but I would love to hear more about the SOX requirements and what you are working on. Since I'm in Canada, SOX is not a requirement for me, but our organization needs policies and documentation in the worst way.

Scott

# re: Sarbanes-Oxley and Data Dude @ Wednesday, December 13, 2006 11:22 PM

I don't really consider a collection of sql scripts for your db to be very good documentation (although it may satisfy the SOX requirements).

I am partial to SqlSpec (www.elsasoft.org) for generating docs, but that's partially because I wrote it :)

Jesse