Recent press articles argue that implementing the requirements of the Sarbanes-Oxley Act (SOX)1 has forced the CIO to report to the CFO rather than the CEO. The articles claim that because SOX's reporting requirements are mainly financial, the information systems and organization to implement the regulations naturally fall under the control of the CFO.