For publicly traded companies, no matter what software program and customization options the business chooses, Sarbanes-Oxley regulations will dictate the structure of the AIS to some extent. This is because SOX regulations establish internal controls and auditing procedures that public companies must comply with.