Sarbanes-Oxley Act. US federal law establishing auditing and financial regulations for public companies, including requirements for IT security controls.