Sarbanes-Oxley Act

The Sarbanes-Oxley Act of 2002, also known as the Public Company Accounting Reform and Investor Protection act requires compliance by public companies, their boards and the public accounting firms. The section 404 of SOX defines the reporting requirements for IT controls and procedures related to information access by authorized individuals, thus guaranteeing the data integrity throughout the lifecycle of data.

WHAT ARE COMPLIANCE REQUIREMENTS?

In order to determine whether financial institutions are compliant with the GLBA Privacy regulations, all aspects of the organization's security environment and practices need to be reviewed/assessed. The criteria for assessment include:

• Comprehensive review of the organization's Information Security Architecture Plan
• Information Security Technical Policies and Procedures
• Internal Security Controls Assessment process
• Database access monitoring
• Network Security Threat & Vulnerability Assessment

ViewTrust ComplyVision™ solution has been designed to guide audit teams through a structured methodology that strictly follows the ISO 27001 standard mapped to the GLBA requirements and helps prepare the HIPAA audit package complete with assessment, analysis and documentation. The solution also allows creation, maintenance and reporting of the Plan of Actions (POA) throughout the pre- and post-audit process.

ComplyVision™ solution provides a full view of your current security posture through self-assessment while breaking down the improvement process into straightforward, manageable and repeatable steps. Using methodical analysis, potential security gaps are identified and addressed with authentic, real-world solutions.

For Continuous compliance, consider combining the ComplyVision™ solution with the ThreatVision™ solution.

For long term log archiving and reporting consider using the LogVision™ solution.

For additional information on how ViewTrust Compliance solutions can help you in your GLBA audit, please contact our experts at 703.627.7539, or e-mail us at compliance@viewtrust.com.