{"id":242,"date":"2007-03-08T07:00:04","date_gmt":"2007-03-08T15:00:04","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=242"},"modified":"2007-03-08T07:00:04","modified_gmt":"2007-03-08T15:00:04","slug":"compliance-multiple-regulations-merge-and-conquer","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/compliance-multiple-regulations-merge-and-conquer\/","title":{"rendered":"Compliance: Multiple Regulations? Merge and Conquer"},"content":{"rendered":"

There are a lot more regulations under the umbrella of compliance than just\u00a0Sarbanes-Oxley<\/a>\u00a0(SOX).\u00a0 IT groups, especially those in the financial services area, are under pressure to comply with multiple regulations from federal and state governments that may include BASEL II<\/a>, Patriot Act<\/a>, GLBA<\/a>, PCI<\/a>, SEC 17a3-4 (Email Retention), and CA SB 1386<\/a>.\u00a0 But there’s more.\u00a0 Consider HIPAA<\/a>, 21CFR11<\/a>, and\u00a0don’t forget\u00a0the non-US equivalents to these and other regulations.\u00a0 In the US there are more than 100 such regulations.\u00a0 And this doesn’t include regulations relative to a specific industry.<\/p>\n

Standardized frameworks or methodologies have grown up that try to address specific regulations.\u00a0 Rather than starting from scratch, the framework saves companies money by outlining a proven set of best practices.\u00a0 The CobiT<\/a>\u00a0(Control Objectives for Information and related Technology) framework is often used when addressing Sarbanes-Oxley.\u00a0 Guidelines from FFIEC<\/a> (Federal Financial Institutions Examination Council) is a framework<\/a> targeting GLBA (Gramm-Leach-Bliley Act) compliance.\u00a0 ISO 17799<\/a>\/27001<\/a> security guidelines are often used to ensure compliace with HIPAA.<\/p>\n

Ideally,\u00a0for enterprises to address compliance across multiple regulations, a comprehensive global approach to policy is needed.\u00a0 But that isn’t easy.\u00a0 Manually mapping requirements point by point from individual regulations into a common company policy can be daunting, especially given the ever evolving nature of the regulations.\u00a0 Fuzzy mappings complicate the process: similar, but not identical,\u00a0requirements can create problems in determining how to deal with conflicts.\u00a0 Many IT organization attempt to build in-house multi-purposed compliance systems but often give up because of the complexity.<\/p>\n

Some software companies are now creating solutions<\/a> to address compliance when multiple regulations are involved.\u00a0 Software-based Common Contol Frameworks allows a company to create a single policy, a sort of Compliance Management System (CMS).\u00a0 These systems can merge the rule-sets from regulations and can identify how changes to any one particular rule would affect any other control or policy in the system.\u00a0 Reports can be generated that detail compliance status with respect to a specific regulation.<\/p>\n

With the ever-growing complexity surrounding compliance and multiple reguations, it seems only natural that custom software solutions would evolve to address the problem.<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

There are a lot more regulations under the umbrella of compliance than just\u00a0Sarbanes-Oxley\u00a0(SOX).\u00a0 IT groups, especially those in the financial services area, are under pressure to comply with multiple regulations from federal and state governments that may include BASEL II,…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,10,28,30],"tags":[],"class_list":["post-242","post","type-post","status-publish","format-standard","hentry","category-compliance","category-content-management","category-records-management","category-sarbanes-oxley"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=242"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/242\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}