By Subraya Mallya
Sarbanes Oxley Act (SOX) enacted in 2002 created a watershed moment for companies forcing them to take a critical look at their internal controls and processes. Executives operating unfettered until then abusing company resources and shareholder money were now asked to account for their actions. Although the mandates under the SOX Act started out murky […]
Tags: Access Control, Material Risk, PCI-DSS, Risk Management, Sarbanes Oxley (SOX) 404, Segregation of Duties (SOD)
By Subraya Mallya
In the last two posts, I covered considerations to be made in Choosing a SaaS vendor and Technology Considerations. In this post I will go into the governance controls you should include in your evaluation checklist of a SaaS vendor. In this day and age of increasing governance and regulatory compliance mandates, the evaluation of […]
Tags: Access Control, business continuity, Change Management, Data Leaks, Data Portability, Data Retention, Data Separation, Disaster Recovery, Encryption, GLBA, HIPAA, Intrusion Detection Systems, Log Management, PCI-DSS, Sarbanes Oxley (SOX) 404, Scheduled Maintenance
By Subraya Mallya
One of the critical requirement of governance mandates like SOX 404, PCI Compliance, HIPAA and SAS-70 is that companies manage their provisioning in a more controlled and audited manner. Companies with disparate applications from different vendors are confronted with the challenges around it. As part of my discussions with companies I have been talking to […]
Tags: Access Control, LDAP, Provisioning, Single Sign-On
Recent Comments