This article has some good food for thought on SOX impacts on IT, for example:
"There appears to be a prevailing view that SOX is fundamentally a set of regulations that have to be complied with and provided IT Directors and CIOs ‘tick the various boxes’