IT Compliance and Controls

To my colleagues in the technology, audit, and security field:
The Association of Certified Fraud Examiner conference in July this year was a huge success.  For anyone in the business of attesting, securing, or managing the integrity of an organization this conference is for you.  Bottom line - the conference is a constant learning environment.  I [...]

[Read more →]

A recent article raised the point that SOX expense by companies was declining (as it should with the full adoption of AS5 across all filers and it being in place for over 6 years!), and that according to analysts that Governance expenses were on the rise and the new focus of enterprises.  Yes and not [...]

[Read more →]

A constant challenge for organizations is measuring the potential impact and consequences of mandated regulations. The weighting of compliance initiatives based on such consequences is not best practice, but is common. The need to demonstrate a true cost benefit analysis is dependent upon, in part, to the actual follow through and enforcement of [...]

[Read more →]

A quick news bite on a topic I similarly covered at the PCI DSS focused site was posted at Bank Systems and Technology.  Highlights the importance and challenge faced by organizations when they conduct M&A deals.  This article specifically covers the recent purchase by BofA for Countrywide.
Check out the Article Here.
Warning, they have a significant [...]

[Read more →]

It seems that these past few days everyone is releasing a study or report surrounding business compliance and controls. Each has very valuable information and is definitely worth the download and read. I have included each below, and will add as new ones come out (if any) tomorrow). The biggest takeaways of [...]

[Read more →]