The American Corporate Counsel Association (
www.acca.com) has some good materials on Sarbox compliance. And for the excessive "covering my ass"es among you, there are a million seminars around on this lately.
Don't even work for a public company, but figure anal retentive preemptive action never hurts so I've been paying attention.