Do-it-yourself might not be the best way to comply with regulations like the Sarbanes-Oxley Act (SOX) — not when you can use an environment already tested and approved.