Sarbanes Oxley compliance is here to stay. What are organizations doing to not only get the first time certification but also monitor ongoing compliance status? How does IT help here?