How do you maintain data integrity of a custom field while also abiding SOX guidelines?

have it on some (not all) forms or one form and /or make forms role specific.

Only on some?

sure, you want control, no?

Would you expect this question for an admin interview?

???