Saturday | 30 August, 2008
CIO
Preconfigured reports eases Sarbanes-Oxley compliance
PLocks releases add-on to its database security and compliance software
Jon Brodkin (Network World) 27 March, 2007 11:30:57

Related Features
  • +

    Your World. . . Hacked 02 October, 2007 10:51:23

    As your business becomes more collaborative and global, the risks to your company’s trade secrets rise proportionally. Fortunately, there are new strategies to protect the data that allows you to compete
    The call to Bob Bailey, an IT executive with a major US government contractor, came on an otherwise ordinary day in October 2003. "Why are you attacking us?" demanded the caller, an IT leader with a Silicon Valley manufacturer. He wanted to know why Bailey's company had launched a denial-of-service attack against his network
  • +

    Ticked Off at Tick the Box Mentality 04 February, 2008 13:01:15

    Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
    Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
  • +

    Doing Your Sums on . . . Build, Buy or Rent 05 November, 2007 13:32:30

    You’re trying to build a world-class IT team, but everyone’s going after the same talent pool. What mix works best? Should you grow your own, draft your players or barter your way to the line-up you want to field?
    CIOs should never forget that while new technologies have a maturity cycle, the maturity cycle for human beings in IT is even longer
  • +

    Strategies for Dealing With IT Complexity 24 December, 2007 10:30:47

    Every innovation, every business process improvement, comes with an IT complexity tax that must be paid by CIOs in time, money and sweat. Here are strategies to mitigate the increasing complexity of IT as it enables new business.
    Every innovation, every business process improvement, comes with an IT complexity tax that must be paid by CIOs in time, money and sweat. Here are strategies to mitigate the increasing complexity of IT as it enables new business.
Related Stories
  • +

    Five ways to roll out SOA 06 November, 2007 10:15:14

    Big name companies from Comcast to United Airlines are jumping into SOA, changing the way organizations plan, develop, and deploy enterprise applications
    Back when SOA first started getting traction, the goal was simply to make application functionality available as a shared service. Companies made up their architectures as they went along -- and of course, they're still doing that. The difference today is that, in the last couple of years, the business side has a better sense of the strategic value of IT, while IT has learned more about the competitive pressures business must endure. As a result, SOA now offers the possibility of greater alignment between IT and business than ever before.
  • +

    Can Macs conquer the enterprise? 11 January, 2008 10:55:53

    The field is wide open for a Macintosh insurrection on the business desktop. It could happen, but probably won't. Here's why.
    If Apple were a football team, the New England Patriots would have had some serious competition this year.
  • +

    Microsoft's marriage of easy communications 19 October, 2007 11:08:43

    The combination of Microsoft Office Communications Server 2007 and Exchange Server 2007 brings voicemail to the in-box, and speed and flexibility to how Windows workers communicate
    We've been watching the romance develop between OCS (Office Communications Server 2007) and Exchange Server 2007 since OCS became available in beta earlier this year. When OCS finally came of age last month, we brought the mature couple together for a Hawaiian wedding.
  • +

    Everything you need to know about Microsoft certs 31 December, 2007 07:16:29

    Certification guru Patrick Regan explains the new Microsoft certs and reveals which Cisco, project management and security certs are worthwhile.
    Moderator-Julie: Welcome and thank you for coming. Our guest today is certification guru Patrick Regan. Patrick has penned over a dozen books, written the study guides for the A+ certification exams for Cisco Press and is currently writing an Exam Cram on Windows Server 2008. When not writing books, Patrick is a senior network engineer at Pacific Coast Companies supporting a large enterprise network and a celebrity blogger for Microsoft Subnet. We are giving away 15 free copies of Patrick's latest book, too. Go to the contest page for details. Now onto the chat.
  • +

    Entitlement management: Access control on steroids 04 December, 2007 10:47:33

    Entitlement management tools bring fine-grained access control to another level
    Faced with looming regulations such as the Health Insurance Portability and Accountability Act and the Sarbanes-Oxley Act, Craig Shumard, chief information security officer for healthcare provider Cigna, knew he needed better tools for role-based access control.
Additional Resources

A vendor that makes database security and compliance products today unveiled a set of pre-configured reports that automate the process of generating audit reports needed to comply with the Sarbanes-Oxley Act.

IPLocks has developed about 20 pre-configured reports detailing controls companies use to prevent unauthorized changes to data or fraudulent transactions. These allow internal auditors to generate reports by "pointing and clicking," instead of sifting through mountains of information, company officials say.

"Many of the Sarbanes-Oxley auditors, this is a big part of their job, sifting through reams of data and attempting to filter some of that data," says Adrian Lane, chief technical officer of IPLocks.

IPLocks is initially making the reports available at no additional charge to companies that use the IPLocks Database Security and Compliance Solution. The reports will remain free until mid-2007. IPLocks marketing director Tom Yates says he doesn't know what the price will be after that time.

The pre-configured control reports, which are being called "SOX-in-a-Box," include the following:

* Abnormal termination of database activity reports, which identify failed routine transactions and processes between the IPLocks application and a database, such as failed financial transactions and login attempts.

* Abnormal use of service accounts reports, which identify service accounts and related transactions that originate from locations other than the application server.

* End-of-period adjustments reports, which track changes to the general ledger at the end of each month.

IPLocks says it consulted with the Big Four the Big Four audit firms when developing the pre-configured compliance reports. Lane says many companies could get away with having fewer controls than they do now, partly because too much emphasis is placed on network controls, instead of database controls.

"The automation allows us to do it more efficiently," Lane says. "What we're finding is less controls are appropriate. If your controls are intelligently designed and implemented, you can get away with fewer."

IPLocks customers include more than 100 companies worldwide, including at least 10 who are already using the SOX-in-a-Box add-on, Lane says. Pricing for corporations with eight to 10 databases, including professional services, customization and the creation of special controls, would run from about $100,000 to $150,000, according to Yates.

More about YATES, ACT
Market Place
 

2008 CIO Summit

19th August, 2008 Four Seasons Hotel, Sydney Developed in partnership with CIO Magazine, IDC, INTEP and the CIO Executive Council.

The world of the CIO is extremely complex and diverse. Multiple priorities demand attention and decisions are needed instantly. Individual teams need to be driven towards common goals, and businesses strive to become more mobile, agile and responsive. For CIOs, the challenge never ends.

Every year the CIO Summit identifies what is top of mind for CIOs across Australia and New Zealand, and offers insight for CIO benchmarking and vendor strategic planning alike.

Recent IDC research shows that over 59% of CIO's believe that 'to achieve their business strategies, technology should be used more aggressively than today.'

Join us on August 19th to discover how this is possible with the latest technologies including Virtualisation, Web 2.0, IP Surveillance and Software as a Service (Saas).

Click here for registration.

Click here for more information.

Please email Denyse_Robertson@idg.com.au for further information.

  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Best Western forced to play defense on data breach disclosure 29 August, 2008 08:08:00

    Could hotel chain have done a better job of defusing story about system intrusion?
    The headline in this week's Glasgow Sunday Herald -- "Revealed: 8 million victims in the world's biggest cyber heist" -- was a grabber.
  • +

    US Terror threat system crippled by technical flaws 28 August, 2008 09:53:00

    US Congress charges that US$500m project to prevent another 9/11 is a complete failure.
    A US House subcommittee is charging that a US$500 million IT project intended to "connect the dots" on terrorists and help prevent another 9/11 is a failure; it can't even handle basic Boolean search terms, such as "and, or and not."
  • +

    Malware infects space station laptops 28 August, 2008 08:15:00

    Not the first time, says NASA; astronauts load up Norton AntiVirus
    Malware has managed to get off the planet and onto the International Space Station, NASA confirmed yesterday. And it's not the first time that a worm or virus has stowed away on a trip into orbit.
  • +

    Separation of duties and IT security 28 August, 2008 09:40:00

    Muddied responsibilities create unwanted risk. Kevin Coleman says auditors may start labeling poorly defined IT duties as a material deficiency.
    Separation of duties is a key concept of internal controls and is the most difficult and sometimes the most costly one to achieve. This objective is achieved by disseminating the tasks and associated privileges for a specific security process among multiple people.
  • +

    How to recruit and retain the best young security employees 27 August, 2008 08:32:00

    Today's youngest generation of workers, known as Generation Y, have different career goals than their parents did. What do you need to know to get them to work for you?
    The final installment in a series of articles about generational differences and security. Part one looked at managing workers in different age groups. Part two examined the types of security concerns that are most commonly associated with different generations in the general workforce. This article provides recruiting and retention advice for security employees.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

The Secrets of C-Suite Success

With help from the CIO Executive Council, we tap into research about successful executives. Read on to learn more about the competencies CIOs need to develop to take the corner office, where CIOs fall short and what CEOs expect from CIOs.

Sponsored Links