A new whitepaper discussing SOX compliance and VSTS has been released.

Microsoft Visual Studio Team System 2008 can be used to assist a business in collecting information that concerns its software-development practices, which may be of use towards compliance with a regulatory framework, such as Sarbanes-Oxley section 404 ("Sarbanes-Oxley 404") internal-control verification and testing.

You can download the whitepaper from MSDN here:  http://msdn2.microsoft.com/en-us/library/cc441754.aspx