Which statement about SOX is true?

A.
Section 404 of SOX is related to non IT compliance.

B.
It is a US law.

C.
It is an IEFT compliance procedure for computer systems security.

D.
It is an IEEE compliance procedure for IT management to produce audit reports.

E.
It is a private organization that provides best practices for financial institution
computer systems.

Explanation:
The Sarbanes–Oxley Act of 2002 (Pub.L. 107–204, 116 Stat. 745, enacted July 30, 2002),
also known as the “Public Company Accounting Reform and Investor Protection Act” (in
the Senate) and “Corporate and Auditing Accountability and Responsibility Act” (in the
House) and more commonly called Sarbanes–Oxley, Sarbox or SOX, is a United States
federal law that set new or expanded requirements for all U.S. public company boards,
management and public accounting firms. There are also a number of provisions of the
Act that also apply to privately held companies, for example the willful destruction of
evidence to impede a Federal investigation.
https://en.wikipedia.org/wiki/Sarbanes%E2%80%93Oxley_Act