Which Law Protects Stakeholders From Accounting Errors and Fraud?
What information security law or standard aims at protecting stakeholders and the general public from accounting errors and fraudulent activities within organizations?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Tests whether you can map a compliance driver to the right law — the trap is picking ISO/IEC 27001 or PCI-DSS because they are the standards candidates memorize most for 'security controls'.
Information security laws each address a different risk domain, and this question asks which one targets accounting accuracy and fraudulent financial reporting. The page confirms that SOX (Sarbanes-Oxley) is the standard aimed at protecting investors and the public from accounting errors and corporate fraud.
Choosing ISO/IEC 27001:2013 because it sounds like the broadest, most authoritative 'information security standard'; it is a voluntary ISMS framework, not an accounting-fraud statute.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
SOX (the Sarbanes-Oxley Act of 2002) was passed after the Enron and WorldCom collapses specifically to protect investors and the general public by forcing accurate, reliable corporate financial disclosures. It imposes internal-control and record-keeping obligations on publicly traded companies and makes executives personally accountable for the accuracy of financial statements. That is exactly the wording of the stem — accounting errors and fraudulent activities within organizations — so SOX is the only option that maps to financial-reporting integrity rather than to IT controls or payment-card data. This also matches the CEH blueprint's treatment of SOX as the financial-fraud law in the laws-and-standards module.Why the Other Options Are Wrong
FISMA is a U.S. federal law aimed at securing government agency information systems, not at accounting accuracy for stakeholders. PCI-DSS is a contractual card-industry standard focused on protecting cardholder data in payment environments, so its scope is payment security rather than financial reporting. ISO/IEC 27001:2013 is a voluntary, certifiable management-system standard for information security; it provides control objectives but has no statutory authority over accounting disclosures or executive accountability. None of these three addresses the investor-protection and anti-fraud purpose described in the question.Community Comment Notes
Consensus is essentially unanimous: as Binx explains, SOX was "enacted in response to major financial scandals (like Enron and WorldCom) to protect investors" by improving the reliability of corporate disclosures. qwerty100 simply anchors the item to the study material — "C. SOX Module 01 Page 88" — confirming the exam blueprint places this law in the introduction module. nosavotor's request to "double-check this response" is a useful habit, but the reasoning above independently confirms the key rather than deferring to the vote count.Official Reference
Exam Strategy
When a stem uses financial-reporting words such as 'accounting errors', 'fraudulent activities', 'investors' or 'corporate disclosures', map straight to SOX. Reserve FISMA for federal agencies, PCI-DSS for cardholder data and ISO 27001 for voluntary ISMS certification.
Frequently Asked Questions
Why is ISO/IEC 27001:2013 not the answer if it is an information security standard?
ISO/IEC 27001 is a voluntary ISMS certification framework for controls, not a law governing accounting accuracy or executive accountability for financial statements.
Does PCI-DSS protect the general public from accounting errors?
No. PCI-DSS is a payment-card industry standard protecting cardholder data; it says nothing about financial reporting integrity or fraud in corporate disclosures.