Search the Library
 
Home >

IT Management

>

Sarbanes Oxley Compliance

The Sarbanes-Oxley Act of 2002 is a United States federal law passed in response to a number of major corporate and accounting scandals including those affecting Enron, Tyco International, and WorldCom (now MCI). These scandals resulted in a decline of public trust in accounting and reporting practices. The Act also covers issues such as auditor independence, corporate governance and enhanced financial disclosure.

Results 1 - 25 of 65 matches Sort Results By : Published Date | Title | Company name
Laws, regulations and compliance: Top tips for keeping your data under your control
By : Sophos Published Date: Dec 12, 2008
The challenge of complying with a growing number of frequently changing government, industry and internal regulations designed to protect data is becoming harder and more expensive to manage. This paper outlines the rules, looks at the main threats to security compliance and highlights how a well-defined strategy, backed up by powerful technology can provide the solution.
Download Now
Sophos
Spreadsheet Controls and the NAIC Model Audit Rule
By : Prodiance Corp. Published Date: Nov 07, 2008
Since the National Association of Insurance Commissioners (NAIC) made revisions to the Financial Reporting Model Regulation (Model Audit Rule) in June 2006, the insurance industry’s attention to the risks associated with financial reporting has been on the rise. Structured similarly to Section 404 of the Sarbanes‐Oxley Act, the Model Audit rule places a significant burden on C‐level executives to ensure their oversight in the internal controls for financial reporting (ICFR) process. Executives within these insurance organizations, both public and private, will be required to evaluate their internal controls in preparation for the first reports due in 2010 for the 2009 reporting period.
Download Now
Prodiance Corp.
UK - Government Connect Secure Extranet (GCSx)
By : LogRhythm Published Date: Sep 10, 2008
Get the facts you need to know about how the collection, management and analysis of log data are integral to meeting many GCSx requirements. Read this whitepaper to learn more…
Download Now
LogRhythm
The Business Case for Email Archiving
By : GFI Published Date: Aug 21, 2008
For businesses around the world, email has become the primary means of communication with people inside and outside of the organization. Business transactions kick off in the form of an email, most customers use e-mail to negotiate contracts and agreements and exchange invoices and payment information. Email is also heavily used by marketing departments to issue mailshots to customers announcing new offers and special deals and so on.
Download Now
GFI
NERC CIP Compliance
By : LogRhythm Published Date: Aug 03, 2008
LogRhythm, the leader in Log and Security Event Management Solutions, has prepared a "Quick Read" whitepaper to help you understand what's required to ensure compliance with: CIP- 003-1 – Cyber Security – Security Management controls; CIP- 005-1 – Cyber Security – Electronic Security Perimeter(s); CIP- 006-1 – Cyber Security – Physical Security of Critical Cyber Assets; CIP -007-1 – Cyber Security – Systems Security Management; CIP -008-1 – Cyber Security – Incident Reporting and Response Planning

The whitepaper also contains a compliance reference chart with the specific CIP requirements matched with recommended steps to ensure compliance.
Download Now
LogRhythm
Email Archiving in United Kingdom: The Key Laws That Affect Your Business
By : GFI Published Date: Jul 15, 2008
Today, more than ever before, legal and compliance issues are driving the case for email archiving. Email archiving legislation is complex and varies greatly from country to country. Unless companies are well versed in compliance law, the various regulations affecting email can be a minefield.
Download Now
GFI
Email Archiving in the US: The Key Laws That Affect Your Business
By : GFI Published Date: Jul 14, 2008
Email is a primary source of documentation for many organizations and it has taken on an increasingly critical role in corporate litigation and court cases. The need to archive all email correspondence is growing in importance because companies are realizing that being in a position to retrieve an old email could save them thousands of dollars (euros) in legal fees and fines as well as their credibility.
Download Now
GFI
Proving Compliance with McAfee Total Protection for Data
By : McAfee Published Date: May 01, 2008
Companies feel a sense of security from encrypting data stored on corporate systems on desktops, laptops and mobile devices. They believe this act will protect their intellectual property, and sensitive customer information will remain safe and secure from unauthorized access.  But that is not enough. Simply encrypting this information doesn’t help you prove compliance with external regulations or internal controls during a financial audit or legal discovery process.
Download Now
McAfee
Compliance. Protection. Recovery. A Layered Approach to Laptop Security for Corporations
By : Absolute Software Published Date: Feb 20, 2008
This paper discusses the problems IT departments face with laptop theft, mobile data protection, IT asset tracking, and regulatory compliance such as Sarbanes-Oxley, HIPAA, Gramm-Leach-Bliley, and California Senate Bill 1386.
Download Now
Absolute Software
A Guide to Understanding Messaging Archiving
By : Sunbelt Software Published Date: Jan 31, 2008
Messaging archiving can help organizations solve all of these problems and can satisfy a wide range of legal compliance, regulatory, storage management, knowledge management and other problems. This Osterman Research white paper discusses the several reasons to implement a messaging archiving system and provide an overview of Sunbelt Software’s offering focused squarely on the archiving space.
Download Now
Sunbelt Software
Ensuring SOX Compliance via Enhanced Change Management
By : Solidcore Published Date: Jan 10, 2008
Assure SOX compliance and address key questions asked by SOX auditors with simple change management enhancement.
Download Now
Solidcore
4 Steps to Data Security Compliance: Technologies to Help Your Organization with U.S. Regulations
By : SafeNet Published Date: Nov 19, 2007
U.S. organizations that handle corporate and personal data must conform to certain government legislation to protect this private information from compromise, unauthorized access, interception, or corruption. However, organizations with little or no education of these mandates or suitable solutions will find their budgets and their manpower stretched too thin.
Download Now
SafeNet
Meeting SOX, PCI, and HIPAA Compliance with Secure and Auditable Vendor Access
By : Axeda Corporation Published Date: Nov 08, 2007
How secure are the VPNs and modems that your vendors and partners use to access your data center? Can you confidently track all activity to meet SOX, PCI, and HIPAA compliance requirements? Learn how Axeda ServiceLink for Data Centers empowers you to provide your vendors and partners with secure and auditable access to your mission-critical data center.
Download Now
Axeda Corporation
How Can Identity and Access Management Help Me To Improve Compliance and Drive Business Performance?
By : CA Published Date: Nov 08, 2007
CA Identity and Access Management automates the management of user identities and ensures that only properly authorized users can access critical IT resources from the Web to the mainframe. It empowers your organization to reduce IT costs, mitigate overall security risk, enable new business opportunities and deliver continuous regulatory compliance.
Download Now
CA
Trust & Competitive Advantage: An Integrated Approach to Governance, Risk and Compliance
By : SAP Published Date: Sep 17, 2007
Burned by Enron-esque scandals, investors and governments are imposing rigorous reporting requirements to keep companies on the straight and narrow. These reactions are a symptom of a fundamental force in the economy: a crisis of trust among stakeholders of corporations.
Download Now
SAP
Payformance Protects Confidentiality of Payment Processing Information with NeoScale
By : Neoscale Systems, Inc. Published Date: Sep 07, 2007
Given Payformance’s longstanding commitment to protecting the privacy of its clients’ information, the company has decided to investigate data encryption solutions for its primary hard drive storage and secondary backup tape storage. With its multi-vendor interoperability, NeoScale’s CryptoStor storage security appliances emerge as the obvious choice.
Download Now
Neoscale Systems, Inc.
Secure Remote Vendor Access to the Enterprise Data Center
By : Axeda Corporation Published Date: Sep 05, 2007
Enabling IT equipment vendors to perform remote service on your data centers helps maximize uptime and lower TCO—but at what risk? Dial-up modems and VPNs introduce security vulnerabilities and lack sufficient auditing capabilities—making it virtually impossible to track external access and maintain data center security. Download this white paper to learn how you can manage security risks, lower service-related costs, achieve regulatory and internal compliance, and more.
Download Now
Axeda Corporation
Improving SOX Compliance Efforts with Self-Service Auditing
By : Solidcore Published Date: Aug 25, 2007
This paper lays out the challenges with complying with SOX and suggests a radical solution: build a self-service, automated IT control framework in which all the information required to verify compliance is available in a single reporting system.

Download Now
Solidcore
The Challenge of Securing Hard to Patch Servers in Health Care Environments
By : Blue Lane Published Date: Aug 14, 2007
The healthcare industry has benefited from the breakneck pace of digitization - spanning everything from payments to patient records to X-ray film - but it has also been increasingly exposed to greater risk. Efforts to increase healthcare provider productivity via increased digitization and system interconnectivity have to be counterbalanced against the growing concerns for patient privacy and a backdrop of increasing liability.
Download Now
Blue Lane
Benefits of Securing Servers: Enhanced Security, Compliance and Operational Excellence
By : Blue Lane Published Date: Aug 07, 2007

Needing to implement a patch management solution to comply with SAS 70, Davidson found the solutions on the market lacking. They either required significant resources to test all patches, or were expensive automated solutions. Then, Davidson learned about Blue Lane Technologies, a concept that Davidson loved.


Download Now
Blue Lane
LogRhythm for Gramm-Leach-Bliley Act (GLBA)
By : LogRhythm Published Date: Aug 02, 2007