Although Sox was not originally aimed at IT department, it soon became clear that IT played a major role in ensuring the accuracy of financial data. Consequently , in 2004 and 2005 , there was a flurry of activity as IT managers identified controls, determined design effectiveness, and validated operation of controls through testing. Five IT control weaknesses repeatedly were unconvered by auditors