Register | Submissions | Contact Us

The Compliance Authority: Compliance Management

Compliance Articles: Introduction

Articles on Compliance Management

Addressing Multiple Compliance Regulations
BY ALEX ZADROZNY
Now more than ever, organizations of all sizes struggle to comply with multiple regulatory guidelines and manage the risks and penalties of failing to operate within the rules.

Global Compliance Initiatives: What do They Mean for Me?
BY ROB AYOUB
The compliance acronyms roll right off our lips these days: HIPAA, SOX, PCI. All these and many others are top-of-mind to executives and practitioners throughout the industry. What about the European Union Directive 2002/58/EC, or India's Information Technology Act?

Identity Auditing: Key to Successful IT Compliance
BY TOM REPEDE
In today's business environment, the risk of being found noncompliant with one of the many new regulations out there is high. Just as high is the risk of your business experiencing financial or operational offenses, such as fraud, identity theft, loss of trade secrets or privacy problems.

Unified Compliance Framework

Global Compliance Library
We've partnered with Network Frontiers to bring you the Unified Compliance Framework.
LEARN MORE >>

Governance and The Board of Directors: Taking IT from the Backroom to the Boardroom
BY SANJAY ANAND
Traditionally, IT has been a backroom function. By this I mean that IT has typically been a behind-the-scenes function of corporate America (and the world). IT achieved center-stage status for only a very brief period of time: the late 1990s.

Five Core Competencies of IT Compliance Six Sigma
BY CHRISAN HERROD
Peter Allen's song "Everything Old is New Again" is a truism that applies in the world of Business Process Re-engineering (BPR). Six Sigma methodologies clearly fall under this rubric and are fashionably back in vogue in the world of IT management.

Compliance Webinar- IT Compliance Management

Recorded Compliance Webinars

New Webinar July 15:

Non-Vulnerability Threats—Hackers Outsmart Agency Perimeter Security
How do you protect your agency against an HTTP page flood attack generated by botnets that attempt to take your Web site offline by downloading the same Web page 1,000,000 times per second? How do you protect your own agency staff from being recruited as hosts and used to launch these types of flood attacks?
Speakers: Robert Ayoub, Chrisan Herrod and Ron Meyran

IT Compliance Management: The PCI Leadership Report
Dr. David Taylor, CISSP, Founder of the PCI Knowledge Base and Research Director of the PCI Security Alliance
>> Presentation slides

Summit on Managing IT Risk and Compliance

GRC Industry Survey 2008: A Benchmark for Compliance Programs and Spend
Sanjay Anand, Chairperson of the SOX Institute and Chrisan Herrod, Executive Editor, The Compliance Authority

Taking IT from the Backroom to the Boardroom!
Sanjay Anand, Chairperson, Sarbanes-Oxley Institute and Chrisan Herrod, Managing Director, IT Compliance Magazine

From IT Compliance to IT Governance: Managing Risk within the IT Organization / Assessing the ROI for IT Compliance: A Systems Approach (Part 1)
Sanjay Anand, Chairperson, Sarbanes-Oxley Institute and Victor N. Berlin, Ph.D., President, University of Fairfax

IT Change and Configuration Management
Rob Ayoub, Industry Manager, Network Security Technologies, Frost & Sullivan and Victor N. Berlin, Ph.D., President, University of Fairfax

Global Compliance Strategies
Dr. David Taylor, CISSP and Victor N. Berlin, Ph.D.

Comparing and Contrasting European and U.S. Approaches to Compliance
Chrisan Herrod, Executive Editor, The Compliance Authority and Paul Neale, Executive Vice President of DOAR Litigation Consulting

theBlog

The Governance, Risk and Compliance Factor: Welcome to TheComplianceAuthority.com
Formerly known as IT Compliance Magazine, we're changing our name and expanding our focus.

SCCE's 7th Annual Compliance & Ethics Institute

theArchives

The Role and Responsibility of a Chief Compliance Officer
BY GUY F. TALARICO, J.D.
Many compliance professionals anticipate a Securities and Exchange Commission (SEC) examination with trepidation. However, those who put in place a systematic process, applied diligently and consistently, with records that adequately document the review and corrective action, will be prepared.

From IT Compliance to IT Governance - Managing Risk Within the IT Organization
BY SANJAY ANAND
Buzzwords like Governance, Risk and Compliance (GRC) have traditionally been in the domain of accounting, finance, ethics and law. However, with regulations like Sarbanes Oxley (SOX), the Gramm Leach Biley Act (GLBA), the Healthcare Insurance Portability Accountability Act (HIPAA) and others impacting virtually every area of the business, IT is no longer bereft of GRC.

Technical Challenges to Electronic Discovery
BY RUSSELL SHUMWAY
Under the newly updated Federal Rules of Evidence, electronic discovery has taken on new emphasis. Technical staff now have a pivotal role in the process.

We strives to deliver vendor-neutral insights, perspectives, and best practices in the compliance management marketspace.

Editor: Chrisan Herrod
Submission guidelines