This section of Protiviti's “Guide to the Sarbanes-Oxley Act: IT Risks and Controls – Frequently Asked Questions" addresses IT control considerations in relation to business-process controls. Topics covered include: When should IT controls be considered during the overall Section 404 project? How does an ERP solution impact the evaluation of IT? And, how does a shared-service center impact the assessment of internal control?