I've come across this a couple times since March 2006 when it was published but I can never find it when I need to refer to the darn thing.
Main Document:
Regulatory Compliance Demystified
Key sections:
Sarbanes-Oxley, Section 404
Gramm-Leach Biley Act
SB 1386
Microsoft's Recommendations and Resources
Technology and Technique Best Practices