For Infrastructure & Operations Professionals

Primary Analyst Photo	Document Information	Rate this Document
	July 31, 2009 IT Compliance: From Painful To Pleasant by Khalid Kark with Usman Sindhu, Alissa Dill

This is an excerpt

Executive Summary

With increasing workforce mobility and the extension of the business supply chain globally, organizations are struggling to keep up with increasing corporate and regulatory compliance requirements. Regulations such as the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry (PCI) Data Security Standard (DSS), and Sarbanes-Oxley (SOX) have forced many organizations to spend millions of dollars on compliance with little or no real value to the organization's security posture. Although infrastructure and operations professionals may not be directly responsible for managing IT compliance, often they are implementing compliance requirements. If security implications are taken into account (in addition to the compliance requirements) while selecting, evaluating, and implementing infrastructure technologies, it could lead to savings in cost, effort, and even headcount.

TABLE OF CONTENTS

• Compliance Requirements Add To An Already Full Plate Of Responsibilities
• Think Of Compliance During Technology Selection And Implementation
• Choose Vendor Solutions That Fulfill Multiple Compliance Requirements

RECOMMENDATIONS

• Operationalize Compliance With Advance Reporting And Access Control
• Supplemental Material
• Related Research Documents

This is an excerpt