Indeed, Wallace et al. (2011) provide evidence
that the level of cooperation between the internal audit and information security functions is positively
associated with the organization's level of compliance with the IT-related internal control requirements of
the Sarbanes–Oxley Act.