essay of at least 500 words discussing how database auditing and monitoring fit within a SOX compliance framework