Our organization has recently restructured IT and has separated network engineers into new roles such as architect, implementation engineer, and operational support engineer.
There are concerns surrounding SOX compliance and how / whether we would implement appropriate controls to restrict access to the production environment for architect level personnel as their primary role is strategy and planning. My understanding is that SOX controls for separation of duty are more specific to financial or accounting data - and access to (for example) a production database for dev/QA only personnel.
What are SOX requirements for access to route/switch/transport equipment? Where would separation of duties apply to network engineers?