Promises more than it can deliver.

There is a token part of the book, that gives a very high level overview of what SOX may mean for a Financial department. But it is so high level, that the author may as well talk about any financial regulation. The second part (the IT part), claims that the only way to get success with a SIX-project is if it is treated as a lone IT-project… In short, the opposite of what most practitioner preaches!

You get the distinct feeling in the second part that the authors main goal is to sell his companies expertise in SOX analysis, implementation and management, and not to get you to understand something that may be useful to you.

With that said, the book is not pure rubbish, and there are some gems in it. And it is fairly easy to read, even if there is not that much information contained in it.