Security for R12 EBusiness Suite Applications

I am wondering if anyone would be willing to share a checklist or best practices paper on how they set up security for EBusiness Suite.  We are a new implementation and have reached the point of needing to define responisibilities that will keep the SOX auditors happy.  We only have GL, AP, FA and iExpense.  I have always been fortunate to only have to tweak existing security responsibilities and have never had to start from the seeded ones to create essetially from scratch.  Any help would be greatly appreciated.  Thanks.