CA has unveiled a comprehensive solution for empowering IT organizations to achieve their increasingly challenging and business-critical ‘governance, risk and compliance’ (GRC) objectives. The solution features CA GRC Manager, a new product that provides portfolio management of IT risks across the enterprise, as well as CA's IT control automation solutions.

Unlike IT GRC solutions that offer tabular, report-based policy management, SOX compliance or risk assessment tools, CA GRC Manager is claimed to be the industry's only visual portfolio-based solution. This helps companies effectively organize and prioritize how they will stay in compliance and be under acceptable risk thresholds for the least amount of labor. The concept of a portfolio view is analogous to financial portfolio management, where a portfolio enables measurement and objective evaluation of investment scenarios. With CA GRC Manager, the IT risk portfolio is modeled to fit the desired risk posture of the organization.

CA GRC Manager also includes rich project management capabilities to ensure that optimal remediation plans are produced, communication barriers are eliminated and IT compliance projects are executed effectively.

"To fulfill their continually escalating GRC requirements, IT organizations need to adopt a portfolio-based approach that is cohesive, highly disciplined, and well-automated," said Jacob Lamm, executive vice president and general manager at CA. "By providing a powerful technology foundation for implementing such an approach, CA is enabling customers to successfully cope with regulatory pressures while controlling costs."

CA GRC Manager also enables customers to map their diverse IT risks and controls to specific legislative mandates, industry regulations, and corporate policies. This cross-referencing helps eliminate the organizational ‘silos’ that commonly lead to redundancies, inconsistencies, and gaps in IT GRC. And, with a global repository of IT risks and control information, CA GRC Manager replaces the unsustainable mix of multiple systems and ad-hoc spreadsheets, charts and documents used to handle IT risk and controls in many organizations today.

http://ca.com

•Date: 5th October 2007• Region: World •Type: Article •Topic: IT continuity
Rate this article or make a comment - click here