
When Sarbanes-Oxley set the rulings on e-mail auditing, there was no leniency granted, nor discrimination applied as to what size enterprises would be held accountable. As small enterprises become more aware of this ruling, they are faced with challenges in understanding the law and who is responsible to comply, as well as challenges in terms of planning, budgeting, allocating resources and implementation.