In order to be Sarbanes-Oxley compliant an organization requires a method where information is manageable and obtainable when you are it's required. periodically corporations lose information and can be unsure of its location. This information is critical and can be contained in documents that have been misplaced by email or could be on the hard drives of computers.