A Roadmap to Ensuring IT Compliance: Why, What, How · Are you Compliant? A Roadmap to Ensuring IT...

1
Are you Compliant? A Roadmap to Ensuring IT Compliance: Why, What, How r -- --- --- --- --- -- ' I ' , Why comply? I , ----------------J ----------- I -------------, / a Laws & regulations are non-negotiable The global average cost of non-compliance in the form of fines and enalties was ' ' Savings matter $1.S million In 2011• '-------------------------------- ' ' ' ' ' ' ' ' ' ' ' ' ' ' , The glooal average cost of non-compliance i n the form of lost roductivity and revenue was $".s million In 2011* '---------------------------- ------------ 0 ------------ Security is important Ttie glooal average cost of non-comliance i n the form of business isrution was $3.3 million 1n 2011• '--- - ---------------------------- ------------ f ------------ The reputation of your brand is o n the line ' ' I '-------------------------------- Cost of compliance can be as little as $226 percapita (when 5 or more audits are conducted in a year)* Cost of non-compliance can be as much a s $1,275 per capita On average, the cost of compliance is l. 65 times lower than the cost of non-compliance r --- --------------- ---- --- --- ' : Compliance is achievable :> -- - -- - - - - --- - -- - - - - - - - -- - -- - J (when no audits are conducted)* It's hard Eacti compl iance stanaara It's expensive Comlying witti some laws and regulations can e a little exensive, ut ttie cost of non-comliance is staggeringly higer. It's only for large businesses varies, but with most of tem, software ana eople can help you simlify o� even automate Most laws ana regulations are applicale irrespective of organization size. Only arts ot t tie rocess. some of the elements max ✓- ✓- a- a- Myth: Compliance is not applicable to me/a one-time activity Wrong. Ttiis i s an on-going activity ttiat requires t tie involvement o t everyooay in ttie organization. Every single statutory & regulatory control must be complied with, to avoid legal penalties, reutational aamage, ana even, j ail time. GRC automation can help you kee tracl< of all the re�uisite comliance ractices, and also reduce the deendency on individual stakeholders. Research Which laws and regulations apply to your -@ organization? How can you comply with __ , them? ·------------------------------------------------------ Evaluate Look at your organization's processes, security, safety, etc. to find out what needs to be changed to ensure compliance. I I . ------------------------------------------------------· I 1-1-1 ••• •••••• Plan Plan the change in incremental steps, to smoothen the transition from old practices to compliant practices. ------------------------------------------------------, Act Help your team transition by providing employees with the necessary tools and training. Make sure every employee knows his/her role in ensuring compliance. I ------------------------------------------------------� _ _ o o - & Audit Have your processes audited by compliance professionals to make sure you've got it right. Prepare for changes if not. ------------------------------------------------------, Update Laws and regulations change, either because of t he governing body or because your organization has changed in some way (grown, diversified, etc.). Stay on top of these changes and modify your procedures as required. I , ; t, Happiest Minds www.happ i estminds.com http : //www.tr i pw i re.com/tripw i re/assets/Fi l e/ponemonrue Cost of Comp l iance Report.pdf To know more about our offerings. Please write to us at [email protected]

Transcript of A Roadmap to Ensuring IT Compliance: Why, What, How · Are you Compliant? A Roadmap to Ensuring IT...

Page 1: A Roadmap to Ensuring IT Compliance: Why, What, How · Are you Compliant? A Roadmap to Ensuring IT Compliance: Why, What, How r -----' I , Why comply? ' I -----J , I -----/ a -----,

Are you Compliant? A Roadmap to Ensuring IT

Compliance: Why, What, How

r - - - - - - - - - - - - - - - - '

I '

, Why comply? I , �----------------J

-----------I

� -------------,

/a

Laws & regulations are non-negotiable

The global average cost of non-compliance in the form of fines and JJenalties was

'

'

Savings matter $1.S million In 2011•

'--------------------------------

'

'

'

'

'

'

'

'

'

'

'

'

'

' ,

The glooal average cost of non-compliance in the form of lost

JJroductivity and revenue was

$".s million In 2011*

'----------------------------

------------ 0 ------------Security is important

Ttie glooal average cost of non-comr1liance in the form of business

clisruf)tion was

$3.3 million 1n 2011•'---

-----------------------------

------------ ;,f ------------

The reputation of your brand is on the line '

' I '--------------------------------

Cost of compliance can be as little as

$226 percapita (when 5 or more audits are conducted in a

year)*

Cost of non-compliance can be as much as

$1,275 per capita

On average, the cost of compliance is

l.65 times lowerthan the cost of non-compliance

r - - - - - - - - - - - - - - - - - - - - - - - - - - - - '

: Compliance is achievable :> � - - - - - - - - - - - - - - - - - - - - - - - - - - - - J

(when no audits are conducted)*

It's hard Eacti compliance stanaara

It's expensive Coml)lying witti some laws and regulations

can 1::ie a little exl)ensive, l::iut ttie cost of non-comJ)liance is staggeringly higtier.

It's only for large businesses

varies, but with most of ttiem, software ana J)eople can help you

simJ)lify o� even automate

Most laws ana regulations are applical::ile irrespective of organization size. Only

l)arts ot ttie !Jrocess. some of the elements max

.. ✓-✓-

a-

Myth: Compliance is not applicable to me/a one-time activity

Wrong. Ttiis is an on-going activity ttiat requires ttie involvement ot everyooay in ttie organization. Every single statutory & regulatory

control must be complied with, to avoid legal penalties, rer:1utational aamage, ana even, jail time. GRC automation can help you keel) tracl< of all the re�uisite comr:1liance J)ractices, and also reduce the der:1endency

on individual stakeholders.

Research Which laws and regulations apply to your

-@ organization? How can you comply with__ .;, them?

·------------------------------------------------------

Evaluate Look at your organization's processes, security, safety, etc. to find out what needs to be changed to ensure compliance.

I

I

.------------------------------------------------------·I

1-1-1

••••

••••

•••

Plan Plan the change in incremental steps, to smoothen the transition from old practices to compliant practices.

------------------------------------------------------,

Act Help your team transition by providing employees with the necessary tools and training. Make sure every employee knows his/her role in ensuring compliance.

I

------------------------------------------------------�

..,,_

..,,_

o-----:

u} o-&

Audit Have your processes audited by compliance professionals to make sure you've got it right. Prepare for changes if not.

------------------------------------------------------,

Update Laws and regulations change, either because of the governing body or because your organization has changed in some way (grown, diversified, etc.). Stay on top of these changes and modify your procedures as required.

I

,;t, Happiest Mindswww.happiestminds.com

'!t http://www.tr ipwire.com/tripwire/assets/File/ponemon/frue Cost of Compliance Report.pdf

To know more about our offerings. Please write to us at [email protected]