So all the Sox compliance in the world did nothing to prevent this fraud?
https://www.bloomberg.com/news/articles/2014-11-26/netflix-c...
Being able to detect whether a given employee has taken a bribe from a vendor might trip over SOX-relevant things incidentally but not directly. For example, you might need to certify that every employee has taken anti-bribery training every year, and that's your preventative mechanism so at least employees know what is permissible and what the consequences are.
Unless you think nobody is going to look at this and go “these are consequences that could apply to me”?
SOX compliance builds a paper trail so crimes like this are recorded and uncovered.