|
The IT Compliance Institute, a US-based authority on the role of technology in regulatory compliance, has launched its new ‘Unified Compliance Project’ (UCP). The project represents the first independent initiative to exclusively support IT compliance management by revealing the overlap between complex regulatory requirements.
The Unified Compliance Project is aiming to deconstruct the requirements of corporate regulations - including Sarbanes-Oxley, Basel II, HIPAA, and Gramm-Leach-Bliley - and to present them as a holistic IT compliance view.
By helping companies to look past narrow project goals to see objective commonalities across compliance efforts, the Unified Compliance Project will support a strategic approach to reducing compliance costs, limiting liabilities, and maximising the value of investments in compliance-related technologies and services.
"To reduce IT costs and make smart investments in sustainable compliance efforts, companies need to gain a unified view of their total compliance burdens," says Cass Brewer, editorial and research director at the IT Compliance Institute. "When companies understand where requirements for information security, records management, and other IT goals align, they can more easily leverage technology solutions and services across multiple compliance efforts, corporate divisions, and business systems. The Unified Compliance Project gives companies the basic information they need to identify such efficiency 'sweet spots.' At an atomic level, it reveals the alignment of regulatory requirements and governance standards with specific IT control objectives. Further, it frames this alignment in terms of technology impact areas that hold broad business significance."
The Unified Compliance Project breaks down regulatory and standards requirements into twelve critical IT Impact Zones. These include: Leadership and High Level Objectives; Audit and Risk Management; Design and Implementation; Systems Acquisition; Operational Management; IT Staff Management and Outsourcing; Records Management; Technical Security; Physical Security; Systems Continuity; Monitoring, Measurement and Reporting; and Privacy.
Each IT Impact Zone features:
- IT control objectives mapped to over 60 standards and regulations
- Query functionality to identify what types of control objectives are required for multiple sets of regulations and standards
- Foundation-building Webinars
- Original articles, related news, and white papers
- Information on leading technology solutions
For more information on the Unified Compliance Project, visit: http://www.itcinstitute.com/ucp/index.aspx

•Date: 22nd July 2005 • Region: US • Type:
Article •Topic: BC general
Rate this article or make a comment - click
here
|