McAfee are undertaking ongoing research into compliance audits and their impact on IT functions. Writing on the OCEG website Evelyn de Souza of McAfee states:
“The most notable finding was the lack of automation tools in organizations with more than 5,000 employees. More than half of the respondents used either unspecified tools or spreadsheets. Timely and accurate data collection is a protracted, manual endeavor for many organizations. Proprietary interfaces for point products prevent data integration, even if the reporting capabilities of the products are automated, resulting in the need for spreadsheets. This lack of operational efficiency puts a huge strain on IT departments. It robs them of time to invest in other initiatives.”
Penetration of BPM into compliance-based functions has clearly still got some way to go. Where I disagree with Evelyn is in the need for a vendor-specific compliance reporting infrastructure. Instead, I’d like organisations to recognise that they can ‘roll-their-own’ as part of their SOA using open-source tools.
On January 27th at 2pm Eastern time the Open Compliance & Ethics Group (OCEG) and McAfee will have a webinar panel discussion on Audit Fatigue.
In this webinar, the panel will discuss:
* Preparing in advance to lessen the time and resources involved in IT audits
* Implementing processes and technologies to sustain compliance
* Leveraging your compliance activities to improve risk management and IT governance
Panel participants were chosen from all across the compliance spectrum – from security professionals to auditors to consultants/authors.
Information is can be found at: http://www.oceg.org/Details/Webinar_+Audit_Fatigue
OCEG webinars are free simply by registering on our site at http://www.oceg.org