SOX is in a way the mother of all internal control regulations. Although not the first internal control regulation by a long way, it is the one that has had the greatest impact in terms of its magnitude and its (global) area of application. Enacted in 2002 by the US Congress, it eventually led to the coining of the term Governance, Risk & Compliance, or GRC.