This FAQ booklet from Protiviti contains questions that have arisen in our discussions with clients and others in the marketplace that frequently deal with SOX compliance matters and are focused on improving internal control over their critical business applications. The booklet contains suggestions for effectively segregating incompatible duties, efficiently testing application security, and utilizing automated application controls to reduce the burden of manual procedures.