Sarbanes-Oxley and OPSEC