Workfront should have standard SOX REPORTS.
Recently I have been audited (PwC) for SOX compliance and the auditors requested a report that shows the date in which the user that no longer works in the company has been disabled/deactivation (DIT-12 access report) and the workfront report doesn't support this data. Unfortunately I have lost many points because workfront doesn't report this data.