The Statutory Audit and the Company Reporting Directives are commonly referred to as EuroSOX. These two European directives were issued by the European Union Council of Ministers, and aim to engender more transparency and public confidence in the operations of companies operating within the EU.

The Statutory Audit Directive aims to strengthen the standards and public accountability of the audit profession. The Company Reporting Directive meanwhile aims to enhance confidence in financial statements and annual reports from European companies.

The two EU Directives are required to incorporated into the national laws of EU member states this summer. States are expected to comply with the Statutory Audit Directive by 29 June, and the Company Reporting Directive by 5 September.

Earlier this year, the Information Security Forum (ISF) warned that the introduction of EuroSOX could be chaotic, as each state will have to interpret and translate the collection of directives that make up EuroSOX, leading to subtle divergences of law between different states.

But Touchpaper, which has recently been acquired by Avocent, is encouraging IT directors to view EuroSOX as an opportunity rather than a headache, with IT departments using the Directives to driver better IT governance. Its white paper aims to help companies understand the practical implications of the Directives, particularly from an IT service management perspective.

Touchpaper warns IT directors that while there is no technology-based 'magic bullet' solution for compliance with the Directives, the IT department nevertheless has a vital role to play in improving the general state of corporate governance in Europe.

"IT directors should be informed, so when the financial director asks them, they know a bit about it," said Marina Stedman, director at Touchpaper and the author of the white paper. "There wasn't enough information about EuroSOX, so we wanted to know more, hence the white paper. The paper offers short term actions IT directors can start thinking about."

"European directives are much less onerous than Sarbanes-Oxley," Stedman told Techworld. "They really just highlight best practises. You should be having trained auditors, should understand areas of high risk, fraud prevention etc."

And the IT Director shouldn't worry over possible conflict between EuroSOX and the Sarbanes-Oxley Act. UK and European companies only need to worry about the Sarbanes Oxley Act (which is a piece of US legislation) if they operate in the United States. UK and European companies will need to operate under the EuroSOX directives however.

"Good companies will use the European directives to put their houses in order and implement best practises," Stedman added. "We would tell IT directors that they need to understand its basic principles. Understand what processes they have in place, who is accessing corporate information, how it is transmitted etc. If someone asked who has access to this information, would they know?"