The first considers IT governance to comprise the tasks of managing IT plans and resources in activities such as portfolio management, service management, architecture control and so on. The second definition of IT governance describes how the IT...
Without EC-style government intervention, US companies have often self-regulated, appointing CPOs in response to the customer trust issue. Yet some major corporations do take the privacy issue seriously because of legal compliance requirements and...
Dan DiFilippo, US leader for governance, risk and compliance at PricewaterhouseCoopers, said: "If I were a security vendor, I would be playing a role in the first two areas, even though Sarbanes-Oxley doesn't specifically say security [technology...
A survey of 100 CIOs found that 80 per cent have little or no confidence that the archiving and retrieval capabilities of their company's email system complies with new financial reporting regulations such as Sarbanes-Oxley.
Cisco also announced a new marketing effort in Canada and the US with SAP, to specifically address governance, risk and compliance (GRC) business processes and IT control issues. It said the agreement will help link SAP's GRC solutions with access...
On the surface these reasons alone seem likely to deter a heavily regulated sector from considering SaaS for operational areas where they could face significant fines for failure to comply. Acquisition by or in partnership with large, respected...