we do SOX once a year

we get a document and have to provide screen shots and other proof. the auditors have a checklist they go by. then they ask for more proof and "clarification". it's kind of like getting a mortgage