IT Braces for 'J-SOX' Rules
Japan imposing new financial controls framework similar to Sarbanes-Oxley
Computerworld - Japanese companies and their international subsidiaries have started prepping for next year’s implementation of a corporate governance framework that’s comparable to the requirements imposed by the Sarbanes-Oxley Act in the U.S.
Many U.S.-based IT managers have started working on processes to ensure compliance with the emerging financial controls requirements, informally known as J-SOX, even though initial details aren’t expected until next month.
“This is just like the early stages of Sarbanes-Oxley — nobody really knows” the specific requirements yet, said Michael Pellegrino, vice president of IT at Fuji Photo Film U.S.A. Inc., a Valhalla, N.Y.-based subsidiary of Tokyo-based Fujifilm Corp.
As the largest of Fujifilm’s 12 North American subsidiaries, Pellegrino’s group is following the lead of its parent firm’s IT operations on what steps it should take to document its IT controls.
Pellegrino noted that as part of its due-diligence efforts, his company is already creating a “matrix” of all its hardware, the IP addresses for those machines and the software that runs on them.
He said that his organization expects to document the controls it has in place for several IT processes that could affect the company’s financial activities. Among them are those related to the procurement and development of software applications, the procurement and development of IT infrastructure, the deployment and testing of IT, and the management of third-party IT services. Sarb-Ox Lessons Learned
J-SOX, officially known as the Financial Instruments and Exchange Law, is scheduled to go into effect in April 2008 for roughly 3,800 companies listed in Japan, along with their foreign subsidiaries.
Japan’s Financial Services Agency — similar to the U.S. Securities and Exchange Commission — moved to create J-SOX laws following accounting scandals involving companies such as Seibu Railway Co., Livedoor Co. and the Murakami Fund.
Marios Damianides, an IT risk management consultant and partner at Ernst & Young LLP in New York, said he expects that the relaxation of some Sarbanes-Oxley requirements by the Public Company Accounting Oversight Board in the U.S. late last year should help ensure that the J-SOX rules won’t be excessive for businesses.
The lessons learned from U.S. companies’ Sarbanes-Oxley efforts will lead Japan’s Financial Services Agency to “soften J-SOX [requirements] a little bit,” said Damianides, a former international president of the Information Systems Audit and Control Association.
That work will involve tracking and monitoring the company’s global IT systems, as well as documenting the security safeguards it has in place for each of those systems, said Finney.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
NSA: Riding on Facebook's horse tail.
The U.S. National Security Agency (NSA) is once again close to denying reports that it is indiscriminately monitoring every computer on planet Earth. This time, the freshest, newest, most recent report of NSA mass-surreptitiousness (courtesy Edward Snowden -- ta) alleges the sneaky agency infects computers with malware via a fake Facebook (NASDAQ:FB) login page.
In IT Blogwatch, bloggers play keep-away with the man-in-the-middle.
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Changing the Way Government Works: Four Technology Trends that Drive Down Costs and Increase Productivity
- This paper discusses four technology-based approaches to improving processes and increasing
productivity while driving down department and agency costs.
- Gartner 2013 Magic Quadrant for Enterprise Backup/Recovery Software
- See why CommVault was positioned as the #1 leader in Gartner's 2013 Magic Quadrant for Enterprise Backup/Recovery software for the 3rd year in...
- Forrester Report: CommVault is a Leader in Enterprise Backup and Recovery
- In this report, Forrester takes a deep dive into the evaluation criteria, how CommVault is positioned and the features and functionality that make...
- Forrester Wave for Enterprise Backup and Recovery
- Read this report to see how CommVault continues to outpace its competitors and why Forrester positioned CommVault Simpana as the top backup and...
- Architecting the Network of the Future
- Networks need to change, as does the way IT thinks about and manages them. In addition to reliability, IT must now add higher... All Government IT White Papers
- Four Myths of High-Productivity App Dev Debunked Debunk the main myths surrounding high-productivity application development and how both platforms have overcome them.
On-Demand Webcast: 7 Reasons to Choose VoIP
Thinking about a new phone system for your business?
Be sure to watch this informative webcast. Steve Strauss, small business columnist for USA...
- Top 8 Communications Tools for Small Businesses Powerful technology is available to help your small business improve its communications with customers, employees and suppliers. View this free On-Demand Webcast produced...
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have.
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well...
- All Government IT Webcasts