From an IT perspective, compliance regulations ensure accurate disclosure of risk to investors and safeguard misuse of personal information. Regulation and compliance are concerns of many specific industries – investment management, health care, and those working with the government are but a few. These companies must have specific and effective processes in place that focus on security, privacy and assessment of risk. Sarbanes-Oxley, Gramm-Leach-Billey, PCI-DSS, and HIPAA are just some of the regulatory acts that we help clients comply with.
Figuring out how to comply doesn’t have to be complex and expensive. We’re already familiar with the standards and our complete managed services model enables us to quickly identify areas of your IT network that are not yet up to standard.
To assess your level of current compliance, we can conduct a non-intrusive network audit. The audit focuses on seven key areas, and is a great way to establish a baseline for making improvements. These seven areas (known as SAS70) have been defined by the American Institute of Certified Public Accountants and are as follows:
| Controlled Environment |
Best Practices, Network Health Monitoring, Roles and Permissions Management, 24x7 Monitoring, Patch Management |
| Physical Security |
SNMP-based Monitoring, Event Logging, Asset Discovery |
| Disaster Management |
Readiness Planning via Reports, Performance Monitors, Backup Management, Collaborative Services |
| Availability |
Availability Continuous Monitoring, Remote Management, Deep Monitoring of Critical Servers |
| Information Security |
ISO17799-Compliant Solution, Password Controls, Auditing, Intrusion Detection, Vulnerability Assessment |
| Network Security |
Firewall Management, MBSA Integration |
| Network Health Visibility |
Summary Reports, Asset Inventory, Capacity Planning, Customer Dashboards |
There are quite a number of questions around this topic and we’re here to help. As a trusted technology advisor, we work with our clients to ensure their regulatory and compliance issues are addressed and documented. We can assist with every level of technology compliance including working with the SEC during audits.
For more information about how we can help you with your Compliance needs or to learn more about any of our IT Services, please contact us at info@fpainc.com. Or feel free to call us at 818-501-3390.