What challenges have you encountered with Active Directory SOX Reports?

As with any acquisition, especially in a much larger organization, there's a lot of effort required to get all the right people to reach a decision; at times it can be a real challenge. We were told to go full speed ahead and not change anything. And I thought, wait a minute, this doesn't make any sense. But it works its way through various meetings and it's like, “Well, you probably don't need to do these things...” 

Any sort of compliance work that adds value is very important. But as we know, with Sarbanes-Oxley and the other audit, there's also a lot of busy work in there that you just have to do. So the challenge becomes trying to get rid of that stuff in order to focus on other things.

One challenge with SOX and the AD in reporting consolidating under you, is that you're being given the responsibility to be accountable for processes, services, and people that you don't have direct control over. And then you have to attest.