Here is an IT showcase from Microsoft on how we do compliance.  I tend to work on a lot of  audit collection projects and this article subtly points out the big issue with SOX or other regulatory compliance efforts.

Its about PROCESS!  Notice that our “tools” are actually processes.  Yes they leverage technology, but we all know how fast that changes.  A good process that leverages tools like Operations Manager (ACS) and Configuration Manager will be far more successful than just throwing some software at a problem that when you boil down most regulations, turns out to be a requirement to institute process.

Microsoft IT Streamlines Regulatory Compliance