Double Dipping on SOX

Some companies are leveraging Sarbanes-Oxley investments for business; others are leveraging business investments to comply.

By Thomas Hoffman

November 7, 2005 12:00 PM ET

Recommended

Computerworld - Mention the Sarbanes-Oxley Act to a CIO or a corporate executive, and he's likely to roll his eyes or grimace.
That's because most executives view the compliance requirements as a grim burden, like cleaning out a pack rat's basement.
Large public companies have had to devote thousands of staff hours and invest millions of dollars to identify, document and audit internal controls within their organizations just to comply with Section 404 of the federal law. Often the result has been that other strategic initiatives and revenue-enhancing IT projects had to be put on the back burner.
Those pressures have continued unabated in 2005. U.S. companies are expected to spend nearly $15.5 billion on compliance-related activities this year, with technology spending on Sarbanes-Oxley alone expected to top $1.7 billion, according to Boston-based AMR Research Inc.
Mindful of these investments, some savvy companies have leveraged their Sarbanes-Oxley spending to benefit the business in ways that go beyond mere regulatory compliance, yielding more bang for the buck.


Kim Van Nostern, chief information security officer at Allstate Insurance

Northbrook, Ill.-based Allstate Insurance Co., for example, has adopted a holistic view of regulatory compliance, including steps it has taken to address the requirements of Sarbanes-Oxley, the Gramm-Leach-Bliley Act and the Health Insurance Portability and Accountability Act, says Kim Van Nostern, Allstate's chief information security officer. "We recognize that all those regulations require the same types of controls; they just apply a slightly different filter," says Van Nostern.
Two years ago, Allstate developed its own compliance and control management system to help document controls in its various IT divisions. One of those tools is a scanning system created last year to identify worms and viruses and prevent them from attacking any of Allstate's systems.
Beyond helping Allstate ensure that it has effective security controls in order to comply with Sarbanes-Oxley, the scanning tool has delivered a nice side benefit. It enables the company's asset management specialists to constantly survey Allstate's corporate network and identify and track PCs, servers and other pieces of equipment that they previously didn't have a record of, says Van Nostern.
Catching Exceptions
At the end of 2004, American Electric Power Co. (AEP) began using software from Oversight Systems Inc. in Atlanta to help it monitor transactions in its accounts payable group. If a manager authorizes a purchase above his spending limit, the system recognizes it and spits out an exception report, says Mike Sullivan, assistant controller at the Columbus, Ohio-based power company.
Those capabilities have helped AEP comply with Section 404 requirements. But

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Jump to comments

IT Management

Additional Resources

Xerox

Win a color printer!

By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!

Microsoft

Upgrade to Internet Explorer 8 today.

Save time and mitigate security risk. Deploy it now.

Sybase

NEXT-GENERATION MOBILITY PLATFORMS

In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Informatica 9 Launch: Transform your Business. Transform your world.

LIVE Nov 10, 2009 12:00 PM ET

Architecting Business Intelligence Applications for Change: The Open Solution

LIVE Nov 12, 2009 02:00 PM ET

Faster, Cheaper and Easier to Maintain
Can you afford not to upgrade your servers to today's advanced, energy-efficient technologies?

Strategies for Driving Down IT Support Costs with Lite ITIL Practices
View this now!

Infonetics: WAN Optimization Appliance Market Highlights 1 Q09
Vendor market share positions shuffled once again in 1Q09, learn more now!

Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...

Improving Customer Retention and Satisfaction
Download this White Paper Now!

Efficient Root-cause Analysis in the face of Datacenter Complexity
Isolating Virtualization and n-Tier Application Issues, Measuring Success, Assessing Business Impact, and Enabling Technologies

Supporting Employees Anytime, Anywhere
Download this White Paper Now!

Enterprise Data Governance: Bridging the Business-IT Gap
Register for this live webcast today!

People + Processes + Technology: Creating a Winning Formula for Customer Support
Download Now!

Usability Is Everything
Download this short video! Provided by Workday.

All White Papers | All Webcasts