Which two statements about SOX are true? (Choose two.)
A.
SOX is an IEFT compliance procedure for computer systems security.
B.
SOX is a US law.
C.
SOX is an IEEE compliance procedure for IT management to produce audit reports.
D.
SOX is a private organization that provides best practices for financial institution
computer systems.
E.
Section 404 of SOX is related to IT compliance.