Browse by Tags

All Tags » Compliance » Best Practices (RSS)

Authority Documents: How to Use Them to Guide Compliance

The first step in compliance is to understand what we are complying to. When we say that we are “complying," we are saying that we are fulfilling the authoritative requirements that our organization is mandated, or volunteers, to follow. These authoritative requirements can come in the form of regulations...

Posted to CA on Security Management (Weblog) by Bob Brown on 10-06-2009
Lean GRC: Establish Consistency and Excellence

I have written four previous blog postings that attempted to highlight some of the key principles of Lean Thinking, and how these can be related to the area of GRC. (Check out my past posts here: The Four Main Principles of Lean GRC , Eliminating Waste , Focusing on Individuals Who Add Value , and Leveraging...

Posted to CA on Security Management (Weblog) by Sumner Blount on 07-28-2009
Customer Implementation: An Interview with Metro Wastewater Reclamation District

Posted to CA on Security Management (Weblog) by Reed Irvin on 07-23-2009
Four Steps to Reducing the Cost of Compliance

Divide and conquer has been the mantra of compliance in many organizations. Typically the finance department drives Sarbanes-Oxley compliance. The Information Technology department focuses on ISO 27000, COBIT or other IT-specific best practices. Other departments might be focused on privacy regulations...

Posted to CA on Security Management (Weblog) by Mike Hoefgen on 07-01-2009
Measuring Records Management Compliance

In his book Information Nation: Seven Keys to Information Management Compliance Randolph A. Kahn describes a governance approach for information management which adopts the principles, controls and discipline upon which many corporate compliance programs are built. The seven keys are: Good policies and...

Posted to CA on Security Management (Weblog) by Betty Ann Veverka on 06-19-2009
Video Blog: Scott Mitchell of OCEG on Untangling the Web of Frameworks

In the final installment of our 5-part video blog series, Scott Mitchell, CEO of OCEG, shares his thoughts on untangling the web of risk and compliance frameworks. Trouble viewing the video? Click here to view this and other CA videos on the CA YouTube channel.

Posted to CA on Security Management (Weblog) by CA GRC Blog Admin on 05-14-2009
Video Blog: Scott Mitchell of OCEG on Choosing the Right GRC Solution

In the 4th installment of our 5-part video blog series, Scott Mitchell, CEO of OCEG, weighs in with his thoughts on choosing the right GRC solution. Trouble viewing the video? Click here to view this and other CA videos on the CA YouTube channel.

Posted to CA on Security Management (Weblog) by CA GRC Blog Admin on 05-06-2009
Video Blog: Scott Mitchell of OCEG on Resolving Immediate Pain Points

In the third installment of our 5-part video blog series, Scott Mitchell, CEO of OCEG, shares his thoughts on using a broad GRC strategy to resolve an immediate pain point. Trouble viewing the video? Click here to view this and other CA videos on the CA YouTube channel.

Posted to CA on Security Management (Weblog) by CA GRC Blog Admin on 04-28-2009
Live from CA World: Where to begin the daunting task of implementing IT GRC?

I attended a session on implementing IT GRC at CA World this morning, hosted by Patrice Walker, Director of Risk Management for Jefferson Wells, and Steve Bartolini, Senior Director of IT Compliance at CA. These speakers have extensive experience in actually implementing IT GRC processes within large...

Posted to CA on Security Management (Weblog) by Sumner Blount on 11-18-2008
Live from CA World: Customers Share Insights on GRC Best Practices

[caption id="attachment_404" align="alignright" width="144" caption="GRC customer panelists at CA World"] [/caption] I attended the first GRC session today at CA World on "Best Practices in Complying with Industry-Specific Regulations." The panelists...

Posted to CA on Security Management (Weblog) by Sumner Blount on 11-17-2008

Page 1 of 2 (12 items) 1 2 Next >