|
ComplianceHome is one of the Web's largest library of resources for compliance management of HIPAA, SOX, FISMA, GLBA, FDA, COOP & COG, FFIEC, Basel II, OSHA and ISO 27002/17799. Visit our directories which are the best source on White papers, related news articles, resources on the web, training, webinars, conferences, rules & regulation overview, ask the expert, job and search on vendors, solutions & products. Mon, 18 Aug 2008 08:00:00 +0200 Guidance Software gives enterprises world-class in-house eDiscovery processing capabilities including new connectors for leading archiving and content management solutions and a new work-flow driven interface in version 3.1 of its industry-leading EnCase(R) eDiscovery solution. These added competencies further expand the search, collection, preservation and processing capabilities of EnCase eDiscovery, enabling litigants to reduce risk and realize tremendous cost savings by eliminating outsourcing and bringing the eDiscovery process in-house.
Wed, 13 Aug 2008 08:00:00 +0200 Protiviti, provider of internal audit and risk and advisory services, has been positioned by Gartner, Inc. in the Challengers quadrant in the Magic Quadrant for Enterprise Governance, Risk and Compliance Platforms. The Protiviti Governance Portal provides organizations with a software solution that addresses multiple Governance, Risk, and Compliance (GRC) objectives through one unified technology platform. According to its report, Gartner defines Challengers as follows: Challengers have proven viability, demonstrated market performance and the ability to exceed customer expectations on technical functionality.Challengers need to focus on their product road maps, as well as their sales, marketing, geographic and vertical industry strategies to move into the Leaders quadrant. Gartner evaluated Protiviti on ability to execute, including product/service; overall viability; market responsiveness; and customer experience, and on completeness of vision, which includes market understanding, pr
Wed, 13 Aug 2008 08:00:00 +0200 The Risk Management Association, in alliance with Automated Financial Systems, this week released its Risk Analysis Service data. Representing the industry's only comprehensive credit risk benchmark, today's RAS metrics on commercial credit risk reveal ongoing deterioration in the middle market through the second quarter of 2008. These results reflect portfolio data for middle market exposure provided by 17 top-tier participating institutions, estimated to represent more than half of all middle market commercial loans in the U.S. The data clearly shows that delinquencies and nonaccruals are rising. We are in the downward swing of the business cycle, so we can expect continued asset quality deterioration for a period of time, said Kevin Blakely, RMA president and CEO.
Wed, 13 Aug 2008 08:00:00 +0200 Teradata Corporation announced that China Industrial Bank has adopted the Teradata Enterprise Data Warehouse (EDW) to establish its information management infrastructure. The first phase of the EDW project went into production on April 30, 2006, and was one of the largest information technology (IT) investments by the bank. Delivering operational stability and outstanding performance, the EDW has greatly enhanced the decision making capabilities and core competitiveness for Industrial Bank.
Tue, 12 Aug 2008 08:00:00 +0200 Three surveys, with more than 780 respondents, show the increasing importance of enterprise risk management (ERM) to chief financial officers, audit committee members and chief audit executives. Crowe Chizek and Company LLC released the surveys results, which included participants from a broad spectrum of public and private companies, with revenues ranging from $100 million to more than $10 billion. The surveys found that more than 65 percent of chief financial officers (CFOs) and 70 percent of audit committee members cited managing enterprise risk as the biggest challenge for their organizations over the next 12 months. According to those surveyed, ERM was considered an even bigger challenge than improving financial reporting and improving internal controls for CFOs.
Fri, 08 Aug 2008 08:00:00 +0200 StoredIQ, whose innovative eDiscovery technology revolutionizes the way companies address electronic discovery and litigation readiness, announced today that Network Products Guide, a Silicon Valley Communications publication and a world leading publication on technologies and solutions has named the StoredIQ appliance a winner of the 2008 Best Products and Services Award. This respected annual award honors products and services that represent the rapidly changing needs and interests of the end-users of technology worldwide. As part of the tech-industrys leading global awards program, this years Best Products and Services were nominated from all over the world.
Thu, 24 Jul 2008 08:00:00 +0200 WorldExtendR, provider of remote data and application access software,has announced that its IronDoorR 3.5 remote network access software will make it simple for small to medium sized organizations to immediately implement a realistic telecommuting program for staff. This follows recent research from such respected institutions as the Telework Exchange and MSNBC confirming that telecommuting can significantly reduce both environmental pollution and fast-escalating travel costs associated with inflated gas prices. IronDoor 3.5's software-based secure remote network access enables small to medium sized organizations to set up a telecommuting or telework program by providing staff with secure, anytime/anywhere access to both applications and data (similar to Citrix). By ensuring that remote users can now securely access any resources they require, IronDoor 3.5 will facilitate staff in the reduction of rapidly-escalating costs associated with commuting - which recent MSNBC research estimat
Tue, 22 Jul 2008 08:00:00 +0200 OpenPages, provider of enterprise GRC management solutions that optimize business performance, today announced that FirstRand Banking Group, one of South Africa's largest banking organizations, has selected the OpenPages Operational Risk Management (ORM) solution to address Basel II capital allocation costs as part of the company's overall risk management strategy. FirstRand selected OpenPages ORM because of the solution's rapid time to value and its overall functionality, as well as OpenPages' highly regarded domain expertise and leadership position in the risk management space.
Mon, 21 Jul 2008 08:00:00 +0200 The IS Governance Institute and SourceMedia, publisher of the American Banker and Credit Union Journal, announce a series of seminars and research reports on operational risks and operational loss events on information security, ignored by information technology, that violate regulations required for maintaining federal deposit insurance for 16,000 federally insured financial firms. Operational loss events per Basel II include fiduciary breaches by boards of directors, external fraud, business disruption and process management.
Sun, 20 Jul 2008 08:00:00 +0200 Archer Technologies (Archer), a provider of enterprise governance, risk and compliance solutions, today announced the release of its Data Feed Manager, which provides a new way for companies to perform rapid integrations between industry-leading products and the Archer SmartSuite Framework. Designed for use by technical business analysts, the Data Feed Manager allows Archer clients and partners to use the Archer Framework as a point of consolidation, bringing together data from any source for correlation, analysis, process management and reporting. A vital component of any governance, risk and compliance program is the ability to form an aggregate view of risks, vulnerabilities, metrics and operational data within the enterprise, says Jon Darbyshire, president and CEO of Archer Technologies. With the Data Feed Manager, Archer is putting power in the hands of technical business users to rapidly integrate enterprise data systems with the Archer SmartSuite Framework. This is a new market
Tue, 15 Jul 2008 08:00:00 +0200 With the global implementation of the Basel II Framework (Basel II), Fitch Ratings has detailed in a new report its first-ever rating methodology for assessing the risk assumed by providers of deal-specific liquidity and credit enhancement facilities to asset-backed commercial paper (ABCP) conduits. Under Basel II, banks are required to hold capital against the support facilities they extend to ABCP programs. An important determinant in the calculation of the amount of capital is the credit quality, or rating, of the facility. In its report, Fitch outlines its key considerations when rating these facilities. Specifically, Fitch looks through to the underlying assets that are supported by the facility and applies the relevant asset criteria. In addition, Fitch considers the unique features of the support facility which may impact the rating, such as narrowly defined conditions to draw or available enhancement.
Tue, 15 Jul 2008 08:00:00 +0200 Compliance11, provider of regulatory compliance management solutions, announced that it has released Compliance11 Supervisory Suite 2.0. The second generation Software-as-a-Service application has an enhanced design including expanded functionality within each of the software's four modules -- personal trading, affirmations and disclosures, gifts and case management. Tad Mitchell, president and chief operating officer at Compliance11 said, As a SaaS provider we are able to constantly enhance the application with no impact or cost to our customer base. Our solutions are based on the feedback and direction of our clients resulting in a synergistic and effective compliance management product suite.
Mon, 14 Jul 2008 08:00:00 +0200 McAfee announced enhancements to McAfee Total Protection (ToPS) for Endpoint, McAfees flagship endpoint security solution. This release provides new and updated compliance and security functions, including powerful policy auditing, flexible network access control, rogue system detection, enhanced Web security and improved anti-malware technology. The integration of management capabilities between endpoint security and compliance management enables customers to reduce costs, improve visibility and comply with industry & security policy across their entire infrastructure. According to Research VP Paul Proctor, Gartner, Inc. Companies today realize that they need more than just good security controls, and that they must also address compliance with internal security policies and industry regulations. A combination of good security functions and compliance management improves security operations efficiency and maturity.
Thu, 10 Jul 2008 08:00:00 +0200 INCA (Brazilian National Cancer Institute) creates Hospital Accreditation software based on Risk Management in order to authorize units to offer support within the international health standards.
Tue, 08 Jul 2008 08:00:00 +0200 BWise, provider of governance, risk and compliance (GRC) software solutions, announced the launch of BWise Internal Audit, a new module of the BWise GRC suite. As organizations are striving to meet the requirements of regulations worldwide, BWise Internal Audit offers an integrated approach to governance, risk and compliance (GRC), providing the ability to detect fraud and reduce risks by ensuring the proper design and effectiveness of controls performance. The combination between the BWise GRC suite and this new Internal Audit module enables organizations to streamline compliance processes by jointly facilitating internal audit and business management. BWise Internal Audit includes a secure web-based audit environment for protecting sensitive information from unauthorized usage and an audit working paper to enable re-use of previous audits and audit best-practices.
Mon, 07 Jul 2008 08:00:00 +0200 Chesapeake System Solutions announced that Central Bancompany, a full-service financial institution based in Jefferson City, Mo., is successfully using T-Recs Enterprise and Internet Data Manager (IDM) as central components of efforts to minimize operational and financial risk. Central Bancompany, which has nearly $8.5 billion in assets, serves markets in Missouri, Illinois, Kansas and Oklahoma through 13 community banks with approximately 175 locations. Central also operates a full-service trust affiliate. T-Recs Enterprise is an all-in-one application that offers all the functionality needed to reconcile the entire balance sheetcash and non-cash accountsand a sophisticated workflow management engine that keeps financial compliance processes on track and automatically escalates unresolved issues. T-Recs Enterprise offers unparalleled scalability and flexibility to support the increasing transaction volumes associated with growth-oriented entities such as Central, yet is well
Mon, 23 Jun 2008 08:00:00 +0200 Integrity Interactive Corporation, a company that helps leading global corporations manage and reduce the risk of ethics and compliance failures, today announced its partnership with Vantage Partners, the leading management consulting firm specializing in achieving breakthrough business results by transforming the way companies manage their most important relationships. This partnership will provide clients of both Integrity Interactive and Vantage Partners additional expertise in specific areas of third party relationship management. Companies are looking closely at their supply chain to find ways to reduce risk, manage costs, and drive innovation. Vantage helps companies enhance internal and external collaboration to improve supply chain performance across these key dimensions, said Mark Gordon, Partner at Vantage Partners. Integrity helps its clients ensure that ethical standards are understood and followed by internal and external stakeholders and our partnership will leverage
Mon, 23 Jun 2008 08:00:00 +0200 Sun Microsystems announced the immediate availability of Sun Identity Manager 8.0, the latest version of Sun's flagship provisioning software. The enhancements in Sun's latest release of Identity Manager will help make our quarterly audits much easier. Now instead of trying to make sense of technical entitlement jargon, we can apply business terminology such as job titles and functions to grant and review user access privileges. With numerous product enhancements and new functionality, such as data export and attestation capabilities, Sun Identity Manager 8.0 is the first user provisioning software to truly provide role-based user provisioning, enabling customers to use business roles for both identity lifecycle management and identity auditing across enterprise and extranet environments. The solution has deep integration with Sun Role Manager to help enterprises with their attestation and identity audit needs. In addition, major updates in operational reporting allow customers to anal
Mon, 23 Jun 2008 08:00:00 +0200 Data quality specialists Datanomic announced that international asset management firm, Gartmore, has adopted its dn:Director Sanctions / PEP Screening Solution to deliver a more automated and consistent foundation for mitigating risk as part of its compliance with the EU 3rd Money Laundering Directive. Gartmore is using Datanomics solution to support its proactive Sanctions List monitoring to screen up to 400,000 client records across the business. The Datanomic solution replaces a bespoke in-house system and is used to screen potential matches in its customer base from selected sanctions lists, such as the Bank of England and OFAC in line with its risk-based approach.
Tue, 17 Jun 2008 08:00:00 +0200 The secure management of personal digital information is becoming a key challenge for public and private sector organisations alike and, under the new Criminal Justice and Immigration Act, the UK's Information Commissioner is able to impose substantial fines on organisations that 'deliberately' or 'recklessly' commit serious breaches of the Data Protection Act (DPA). To help organisations comply with the requirements of the Act, IT Governance has launched a 'DPA Compliance Toolkit' that provides all the essential templates and tools, greatly simplifying and speeding up the task.
Sun, 15 Jun 2008 08:00:00 +0200 Symantec announced a significant update to its compliance process automation solution, Control Compliance Suite 9.0, in support of IT Governance, Risk, and Compliance (IT GRC) initiatives within global organizations. Symantec Control Compliance Suite provides customers with the ability to automate key IT compliance processes in order to reduce the risk to their information assets and reduce the costs of managing compliance. Increasingly, IT management is being called on to align with business objectives amidst shrinking budgets. Business executives are asking IT to achieve compliance for internal and external mandates while managing the delicate risk versus return balance. Compliance process automation is the key to meeting these requirements in a cost-effective and sustainable manner.
Wed, 11 Jun 2008 08:00:00 +0200 Symantec announced a significant update to its compliance process automation solution, Control Compliance Suite 9.0, in support of IT Governance, Risk, and Compliance (IT GRC) initiatives within global organizations. Symantec Control Compliance Suite provides customers with the ability to automate key IT compliance processes in order to reduce the risk to their information assets and reduce the costs of managing compliance. Increasingly, IT management is being called on to align with business objectives amidst shrinking budgets. Business executives are asking IT to achieve compliance for internal and external mandates while managing the delicate risk versus return balance. Compliance process automation is the key to meeting these requirements in a cost-effective and sustainable manner.
Wed, 11 Jun 2008 08:00:00 +0200 OpenPages, provider of Enterprise GRC Management Solutions that optimize business performance, announced it has received a patent for its highly configurable GRC platform. United States Patent and Trademark Office (USPTO) awarded the company U.S. patent No 7,356,771 on April 8, 2008, and the patent describes the company's innovation around developing applications based on a metadata-driven framework. The patent demonstrates the uniqueness of the company's GRC platform and its commitment to product innovation. The patent further illustrates the company's leadership in the market for governance, risk and compliance (GRC) solutions. Through configuration, OpenPages' GRC platform provides the ability to develop business applications without coding, which enables OpenPages to respond quickly to new market opportunities and customer demand for new solutions. This metadata-driven approach has allowed OpenPages to release new solutions in rapid succession over the last 18 months. The company c
Wed, 11 Jun 2008 08:00:00 +0200 Basel II Consultancy Contract
Tue, 10 Jun 2008 08:00:00 +0200 At Microsoft Tech-Ed North America 2008, Attachmate Corporation, will showcase its product offerings designed and built for Microsoft Windows Vista and the Microsoft Office 2007 system. Attachmates presence at Tech-Ed further secures its position as the go-to vendor for host access on the Windows Vista/Office 2007 platform. Additionally, Attachmate is announcing general availability of Reflection for the Web 2008, the companys flagship browser-based host access offering. Currently available and attaining traction in the market, Reflection for IBM 2007 is Attachmates built-for-Windows Vista terminal emulation solution. Combining the comprehensive productivity and security feature sets found in Attachmates existing EXTRA! and Reflection host access offerings, Reflection for IBM 2007 strengthens mainframe security, maximizes IT flexibility and provides a set of features that significantly boost user productivity. Reflection is certified for Windows Vista and takes advantage of multipl
Mon, 09 Jun 2008 08:00:00 +0200 OpenPages, provider of Enterprise GRC Management Solutions that optimize business performance, today announced it has received a patent for its highly configurable GRC platform. United States Patent and Trademark Office (USPTO) awarded the company U.S. patent No 7,356,771 on April 8, 2008, and the patent describes the company's innovation around developing applications based on a metadata-driven framework. The patent demonstrates the uniqueness of the company's GRC platform and its commitment to product innovation. The patent further illustrates the company's leadership in the market for governance, risk and compliance (GRC) solutions. Through configuration, OpenPages' GRC platform provides the ability to develop business applications without coding, which enables OpenPages to respond quickly to new market opportunities and customer demand for new solutions. This metadata-driven approach has allowed OpenPages to release new solutions in rapid succession over the last 18 months. The com
Mon, 09 Jun 2008 08:00:00 +0200 CA announced the release of CA Access Control Premium Edition. Offering cross-platform creation, deployment and management of complex, specific, role-based access controls for servers, CA Access Control Premium Edition delivers capabilities that help facilitate customers IT security and compliance with legal, corporate and government regulations. CA Access Control Premium Edition is one of three CA identity and access management (IAM) products announced today. These three productsCA Identity Manager, CA Access Control Premium Edition and a new product, CA Security Compliance Managerjoin seven other CA IAM products announced in October and November 2007 as part of CA IAM r12. The IAM r12 products are designed to help manage the identity lifecycle and provide robust IT security controls, analysis and proof of compliance, and automation of compliance processes.
Mon, 09 Jun 2008 08:00:00 +0200 KACE, a systems management appliance company announced the results of a new study that revealed nearly two-thirds of IT executives and managers believe their companies have not taken appropriate steps to ensure compliance with the license agreements for software they have deployed. The survey further reveals these same IT executives believe their companies are ill-prepared for a software license compliance audit. Citing insufficient software discovery capabilities and manual license tracking processes, IT organizations are left exposed to painful outside audit risks. The research, consisting of an online survey of almost 350 respondents, was commissioned by KACE to gather data about the current state of software licensing compliance in corporate IT. The survey focused on hot-button corporate issues such as unlicensed software, license compliance processes and tools, and perceptions of the impact of software audits. The survey showed IT organizations have not taken adequate measures to
Wed, 04 Jun 2008 08:00:00 +0200 Insurers credit Skywire Software's compliance application, Tracker, for accelerating the state filings process - and helping to speed the time-to-market for new products. Since deploying Tracker, Allstate Insurance has reduced not only the time it takes to file, but also the average time required to receive DOI approval. The company's filing department is now able to submit Department of Insurance forms sent in by product development teams on average in one day, a drop from an average of five to six days prior to the deployment of Tracker. It also obtains approval for a product in all 50 states in 44 days on average. With Tracker we're able to automate the preparation and submission of state filings, said Bonnie Whittman, director of State Filings at Allstate Insurance. This has enhanced our ability to streamline the state filing process and bring new products to market quickly The insight we have gained by using Tracker to monitor the entire process also has given us great insight int
Wed, 04 Jun 2008 08:00:00 +0200 Paisley, provider of governance, risk and compliance (GRC) software solutions, announced that it is a featured exhibitor at The Institute of Internal Auditors (IIA) 2008 Financial Services Conference in Atlanta, Georgia from June 2 to 4. Recognized throughout the industry for its internal audit expertise, Paisley has helped hundreds of organizations unite internal audit processes with other GRC disciplines -- including financial controls management, risk management and compliance.
Thu, 22 May 2008 08:00:00 +0200 Modulo has announced that GreenStone Farm Credit Services (GSFCS) has selected Modulo Risk Manager solution to automate its regulatory compliance. In response to detailed requirements from the Internal Audit department, GSFCS -- Michigan's largest agricultural lender, with several locations in Wisconsin -- was looking for an efficient way to conduct its risk assessment. By leveraging the capabilities of Modulo Risk Manager, the association gained the ability to reduce the cost of ongoing risk assessments. As a $4.5 billion organization of 17,000 members with 37 branches throughout Michigan and Wisconsin, GSFCS is now able to exert effective oversight and transparency of its component processes.
Wed, 21 May 2008 08:00:00 +0200 Nossa Caixa Bank relied on Modulo's risk management solution support; BS 25999 ensures more dependable processes and brings benefits to clients and stockholders Nossa Caixa, the third-largest public Brazilian bank, is the first financial institution to receive the BS 25999 certification in the world.
Mon, 19 May 2008 08:00:00 +0200 A new report by Fitch demystifies the Basel II treatment of asset correlation and provides original empirical analysis of the correlation values assumed under the internal-ratings based (IRB) approach across a range of asset classes. Asset correlation is an influential parameter affecting both absolute and relative IRB capital requirements across financial institutions. Empirically analyzing the regulatory correlation assumptions is therefore an important dimension of interpreting and evaluating Basel II risk-based capital ratios, said Krishnan Ramadurai, Managing Director, Fitch Financial Institutions group. In performing this research, Fitch analyzed historical loss rate data for credit card, consumer, residential mortgage, commercial mortgage, and corporate lending to derive empirically-based estimates of asset correlation for each asset class based on the IRB formulas and concepts.
Sat, 17 May 2008 08:00:00 +0200 Automated Financial Systems (AFS), the global leader in providing commercial lending solutions to top-tier financial institutions, today announced that it has officially shipped its Basel II segment upgrade for AFS Level III, its commercial lending system. It is the first solutions provider in the lending space to do so. Today's segment delivery is an important first step for financial institutions that are required or are opting in to Basel II. said John Shain, president, AFS. Furthermore, in the current, volatile financial services environment, data quality, integrity and transparency as seen through the lens of Basel II are gaining momentum beyond the regulatory community. AFS is committed to equipping leading financial institutions as they shore up data and improve loan origination and administration, while exerting tighter controls to ensure accurate reporting and, ultimately, Basel II compliance.
Sat, 17 May 2008 08:00:00 +0200 Algorithmics has been ranked as a leader for its Basel II credit risk management solutions in a new vendor ranking from Celent, the research and advisory firm. Celent's research, entitled Beyond Basel II: Evaluating the Financial and Credit Risk Solution Vendors 2008, assesses offerings from ten key vendors and examines the state of the market for risk management solutions and the innovative vendors that are helping institutions transition beyond regulatory basics. Of the four key evaluation criteria, Algorithmics is ranked as a leader in advanced features and technology and among the top of those evaluated for its depth of client services. These rankings recognise the sophistication of Algorithmics' advanced economic capital frameworks and its global footprint of reference clients.
Tue, 06 May 2008 08:00:00 +0200 Compliance Coach, a provider of automated regulatory compliance solutions to the financial services industry, announced that it has identified 23 new identity theft red flags and has updated its software, CompliancePal (http://www.compliancepal.com). CompliancePal is the industrys first software solution to enable compliance with the FACT Act Identity Theft Red Flags Rule. The Federal regulation imposes new responsibilities on businesses to prevent consumer identity theft. The impact is broad and the rule affects every single bank, credit union, mortgage lender, auto dealer, credit card lender, payday lender, landlord, utility company, phone company, and any consumer or small business lender in the country.
Tue, 22 Apr 2008 08:00:00 +0200 Qualys announced QualysGuard 6.0, an upgrade to its flagship solution for vulnerability and compliance management. QualysGuard 6.0 enables security managers, as well as key organisation executives, including business line managers, members of the board and auditors, to get an on demand view of IT security and compliance within the enterprise. QualysGuard 6.0 offers new metrics reporting supported by scorecards and secure, collaborative report distribution workflows which help operations and IT staff to be efficient and communicate effectively with auditors and executive management. QualysGuard 6.0 is an integral component of the QualysGuard Security and Compliance Suite also being demonstrated at the Infosecurity Europe tradeshow for the first time in Europe. The QualysGuard Software-as-a-Service (SaaS) suite helps organisations worldwide manage the ongoing convergence of security and policy compliance efforts.
Tue, 22 Apr 2008 08:00:00 +0200 Skybox Security announces the fourth-generation of its security risk management software platform. Over 125 of the world's largest companies have adopted Skybox's unique combination of analytics and automation. With Skybox View organizations can accurately pinpoint and prioritize areas of high risk and predict compliance exposures in just minutes.
Tue, 15 Apr 2008 08:00:00 +0200 Orchestria has announced that its Intelligent Compliance Suite has been deployed for full-service brokerage and investment banking firm Scott & Stringfellow, a subsidiary of BB&T Corporation. Orchestria's policy-based Intelligent Compliance software is employed to analyze all electronic communication channels in support of SEC, FINRA, and company governance priorities. Scott & Stringfellow has also chosen to implement Orchestria's desktop and server agents throughout its organization.
Mon, 14 Apr 2008 08:00:00 +0200 In a pledge to deliver efficient and field-proven unified risk and financial analysis solutions that cater to the banking, insurance and corporate sectors, Pio-Tech signed a partnership agreement with IRIS integrated risk management ag - a leading risk and analysis solutions supplier headquartered in Switzerland. The signing ceremony took place in March, 2008 at Pio-Tech offices in Amman. Under this agreement, Pio-Tech will deliver unified risk and profitability analysis solutions for the banking, insurance and corporate sectors. Including products such as riskpro financial analysis infrastructure and riskprolight - a simplified subset of riskpro for Basel II standard credit risk - these solutions come bundled with the know-how and support from IRIS integrated risk management ag consultants from Switzerland and the region.
Wed, 09 Apr 2008 08:00:00 +0200 Aldon, provider of process-driven application lifecycle management (ALM) solutions, has published a white paper on compliance. Providing best practices, compliance information and advice, the paper outlines how to use regulatory requirements as an opportunity to integrate business and IT. Most organizations nowadays are faced with compliance requirements of some sort, said Matt Scholl, COO and president of Aldon. Whether specific to the industry, such as Sarbanes-Oxley and Basel II for banking, or HIPAA in pharmaceutical, what all companies face is ensuring that business processes are tracked, measured and controlled. The best place for this to be implemented and carried throughout the corporations is in the IT department.
Tue, 01 Apr 2008 08:00:00 +0200 Modulo, provider of IT governance, risk and compliance management solutions will unveil the latest version of Modulo Risk Manager at the RSA 2008 Conference in San Francisco, April 7th through April 11th. Modulo's Risk Manager is a fully automated IT GRC solution which leverages the expertise of IT and Security professionals to cost-effectively manage security risks while enhancing the ability of organizations to comprehensively maintain regulatory and standards compliance. Based on Modulo's 23 years of highly focused experience in developing tools for IT governance, risk management and compliance, Modulo Risk Manager is an integrated solution for: Risk Management; Compliance with SOX, PCI DSS, ISO 27001, ISO 27002, COBIT, HIPAA, FISMA, DIACAP, A130, FISAP and BASEL II; Automating IT Governance Processes aligned with COBIT; Automating Business Continuity Management; Remediation and Incident Management. All required information is automatically organized allowing organizations to effici
Mon, 31 Mar 2008 08:00:00 +0200 Sixty-eight percent of employees admit to bypassing their employers information security controls in order to do their jobs, according to new research from IT Governance Limited. This finding suggests that, even in some of the most sophisticated and security-conscious organisations, managers are failing to understand the correct balance between the confidentiality and availability of information. By implementing the wrong policies and procedures, they are potentially putting their organisations at risk and may be undermining the legitimacy of information security in employees eyes. IT Governance Limited is the one-stop-shop for books, tools, training and consultancy on Governance, Risk and Compliance. In February 2008, it polled 130 technology and compliance professionals on issues concerning the UK Data Protection Act (DPA). The respondents included some of the best informed professionals in this area, as evidenced by the high proportion of organisations with independently certifi
Wed, 26 Mar 2008 07:00:00 +0100 Achiever Plus was first released in 1994 and has now evolved into an integrated Governance Risk & Compliance management software solution, capable of meeting multiple corporate governance, risk management and compliance demands across a diverse range of industry sectors. For the C Level Executive: Easy to use and understand user interface allows all the compliance information needed to make decisions and be aware of to be displayed on your desktop in real time in the web browser. Also, additional expense for software, hardware, or technical training is not necessary. Achiever Plus .NET is utilizing the world's most widely accepted framework and technology issued or sanctioned by Microsoft.
Wed, 26 Mar 2008 07:00:00 +0100 Recent breaches around the world, amounting to billions of dollars, has shaken the worlds business community into closely scrutinizing their back-office security controls. Companies such as Cyber-Ark Software are seeing an unprecedented demand from corporations globally looking for solutions that will securely manage their privileged identities. Cyber-Ark Software released a breakthrough approach to securing application-to-application credentials which has been timely in light of predictions that both Jerome Kerviel at Socit Gnrale and the anonymous informant who gave out customers details at the Liechtenstein Bank, part of the LGT Group to both the German and UK Tax Authorities, were able to do so due to the lack of security controls over privileged users. Enterprise Password Vault (EPV) 4.5 addresses the full range of security and audit challenges surrounding application identities within applications, scripts and application servers.
Tue, 25 Mar 2008 07:00:00 +0100 Amadeus International announced the availability of version 7.3 of its flagship product, eQCM.The release of Version 7.3 is consistent with Amadeus's commitment to provide a comprehensive business process management solution for highly regulated companies. Coordinating all Governance, Risk, Compliance (GRC) and quality management activities via a single robust and flexible system, the solution streamlines all documents, communications, information flows, and corporate business processes throughout a seamless environment. Version 7.3 builds upon the traditional strengths for which Amadeus is renowned - usability, flexibility, intuitiveness, reliability - and extends those characteristics to the following new functionalities and improvements to significantly increase operational efficiency and usability.
Tue, 25 Mar 2008 07:00:00 +0100 Complinet, provider of web-based dynamic compliance solutions to the financial services industry, has teamed up with Steven Lofchie, partner at the law firm of Cadwalader, Wickersham & Taft LLP and the author of Lofchies Guide To Broker-Dealer Regulation, to deliver Lofchies Procedure Manuals. These are innovative compliance and supervisory procedure manuals that have been produced under the direction of Mr. Lofchie to address the needs of financial firms for procedures that are industry-standardized, comprehensive, and straightforward and that will be maintained so that they are never out of date. Stephen Lofchie is a recognized expert in compliance procedures and regulations. His Guide to Broker-Dealer Regulation, published in 2000 and updated in electronic form on Complinet, has become a central text for regulatory guidance amongst financial services firms of all sizes.
Thu, 20 Mar 2008 07:00:00 +0100 Research and Markets has announced the addition of Operational Risk 2.0: Driving Value Creation in a Post-Basel II Era to their offering. Operational Risk 2.0 looks beyond the implementation of Basel II, to how op risk executives can use the tools, intelligence and techniques at their disposal to better inform senior management and the board of directors about the challenges they face. The discipline of operational risk is at a crossroads. Common questions currently asked include: How does the discipline add value to my organisation? What does the advanced measurement approachs modelling techniques say about the op risks my firm is facing? What is the strategic role of operational risk my firm should adopt?
Mon, 17 Mar 2008 07:00:00 +0100 Lancope, the provider of the StealthWatch System, the most widely used Network Behavior Analysis (NBA) and response solution, announced that BlueCross BlueShield of Tennessee is using StealthWatch to strengthen information security and improve overall network management. BlueCross BlueShield of Tennessee relies on the StealthWatch System to monitor its entire network for potential security threats. In addition, StealthWatch helps the health plan provider diagnose latency and availability issues on its network. StealthWatch also aids regulatory compliance efforts for BlueCross BlueShield of Tennessee by providing detailed insight into network behavior and user activity.
Thu, 13 Mar 2008 07:00:00 +0100 Intelliden announced the release of Policy Based Compliance Management 2.0 (PBCM 2.0), the latest version of its total network compliance solution that automatically defines and manages network policies to meet regulatory, operational and industry compliance mandates, in addition to managing and resolving configuration-related security vulnerabilities in real-time. Designed to give network-driven companies greater network control, management and scalability, PBCM 2.0 boasts new and enhanced functionality to help lower the cost of network compliance and audits, accelerate discovery and remediation of configuration-related vulnerabilities and ensure the highest degree of network availability and business continuity. It also combines automated compliance with intelligent remediation, unmatched usability, and support for an unlimited number of policies to meet the needs of the largest and most complex networks.
|