Tuesday, September 28, 2004

Creating a Compliance Management Culture

Technology managers need to understand that they can't rest after ensuring their companies comply with Section 404 of the Sarbanes-Oxley Act. Like it or not, the flood of regulations has only just begun.

Industry, state, federal and international regulations related to IT will multiply over the next few years, industry analysts say. That means its vital that CIOs and other technology leaders create processes and architectures that make it easier to comply with new regulations.

The good news is that most enterprises already possess the technology needed to meet this new challenge.

''Companies shouldn't merely comply with new regulations -- they should use them for business improvement,'' says Joe Rizzo, a principal with Deloitte Consulting's CIO Advisory Services group. As examples, he cites some Sarbanes-Oxley requirements, such as those addressing access control. Sarbanes-Oxley mandates that enterprise software developers cannot have access to production systems, so that applications under development cannot be slipped into production before they're fully tested. ''That's just good business practice,'' Rizzo says.

Creating a Compliance Management Culture

Send to a friend:

0 Comments:

Post a Comment

<< Home

Previous articles

Paisley Consulting and Hudson Financial Solutions ...

Companies Deciding Big Four Seal of Approval Not W...

Captara Corporation Announces Sarbanes-Oxley Repor...

Sarbanes-Oxley as an IT-business alignment driver

Shareholder Litigation Against Foreign Companies o...

Frances, SOX and Inevitability

USATODAY.com - More firms flee Big Four accountant...

.: UBmatrix - Technologies and integrated solution...

Accountants, in demand, seeing hefty pay hikes

SEC gets a second try on Gemstar exec pay / Agency...