Working toward compliant provisioning

Opinion
Apr 2, 20071 min

* What an automated approach to compliance can provide

Working toward compliant provisioning

By Don Bowen and Tom Garrity

Since the Sarbanes-Oxley Act became law in July 2002, it has altered radically the way public companies manage their procurement, accounting, auditing and other internal processes, especially those that are tied to financial reporting.

Public companies have invested tens of billions of dollars in SOX compliance, and many of these investments have been in labor-intensive manual processes. The cost and risk associated with these processes have become untenable, however, and more SOX investments are being directed to automated solutions.

An automated approach to compliance provides the speed, accuracy and visibility necessary to prevent, detect and correct compliance violations. More important, automation can do this without taxing an enterprise’s resources, which in most cases are taxed heavily already.

Integrated compliance solutions optimize and streamline compliance by addressing all compliance-related activities – provisioning, monitoring, analysis and remediation. Such solutions call for the seamless integration of controls-management and identity-management systems. This integration is the essence of an emerging practice called compliant provisioning.

For more on this story, please click here.

Bowen is distinguished director at Sun (Donald.Bowen@Sun.com), and Garrity is vice president of advanced technologies at Approva.