Sarbanes-Oxley sparks forensics apps interest
Vendors offer monitoring tools to help identify incidents of financial fraud
Computerworld - Most companies working on Sarbanes-Oxley projects are laser-focused on documenting their internal financial controls to meet the compliance deadlines that take effect late this year. But the law's requirements are also beginning to generate interest in computer forensics tools that could be used to help identify potential cases of financial fraud.
For example, Avery Dennison Corp. is piloting software announced this week by Oversight Technologies Inc. that can be used to monitor finance systems for irregular transactions. Mark Van Holsbeck, director of enterprise security at Avery Dennison, said the software should cut the time workers at the Pasadena, Calif.-based maker of adhesive products spend poring over printouts of financial data to determine whether any information has been altered or corrupted.
Avery Dennison's use of the Oversight tool, which is being tested on a combination of Wintel and HP-UX platforms, wasn't driven by the requirements of the Sarbanes-Oxley Act, Van Holsbeck said. But the technology should help the company satisfy components of the financial reporting law.
Other users are expected to come to the same conclusion about computer forensics technology, which can track how data is used and modified.
Meta Group Inc. analyst John Van Decker said he expects to see an uptick in forensics technology investments related to Sarbanes-Oxley starting this summer. And Michael Rasmussen, an analyst at Forrester Research Inc., estimated that about a third of the clients he works with have put an investigative response plan in place, including the use of business intelligence tools and other technologies to help monitor ERP and e-mail systems for evidence of potential wrongdoing.
Universal Health Services Inc., a King of Prussia, Pa.-based company that operates hospitals and other medical facilities in various states, already has several fraud-detection systems in place that now should be able to help it meet the mandates set by Sarbanes-Oxley, said CIO Linda Reino.
For example, a homegrown system that was installed in 1998 is used to identify any attempts by employees to alter the amounts of their paychecks. The system, which runs on an IBM AS/400 server, is connected to applications at the bank that support Universal Health's payroll operations "to prevent an altered check from being cashed," Reino said.
Manny Abascal, a partner at Latham and Watkins LLP in Los Angeles, said continually reviewing finance data will be a key facet of Sarbanes-Oxley compliance. "Some companies are thinking ahead so that if they find themselves in this position [where fraud is suspected], they're better able to find the data," he said.
Pricing for Oversight's monitoringtools starts at $85,000 and can go up to about $200,000, based on the number of end users, said CEO Patrick Taylor.
Other vendors of forensics tools include Guidance Software Inc., Consul Risk Management Inc. and Addamark Technologies Inc., which this week plans to announce upgraded software for storing and tracking system log data.
Mandalay Resort Group in Las Vegas provides gaming agencies with information to demonstrate its data-protection procedures. But CIO Tracy Austin said those efforts haven't drawn on the use of computer forensics, and the hotel and casino operator hasn't made plans to invest in the tools to aid in Sarbanes-Oxley compliance.
Mandalay "is primarily focused on documenting internal controls," Austin said.
Read more about BI and Analytics in Computerworld's BI and Analytics Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Forrester: Economic Impact of Switching to Google Apps
- Content provided by Google
Read this Forrester report on the "total economic impact" of Google Apps, and learn how switching to Google Apps creates... - Intelligent Systems: Unlocking Hidden Business Value with Data
- An intelligent system enables data to flow across an enterprise infrastructure, spanning the devices where valuable data is gathered from employees and customers,...
- Concepts of NonStop SQL/MX
- For DBAs and developers who are familiar with Oracle solutions and want to learn about NonStop SQL/MX, this whitepaper provides an overview of...
- HP Advanced Information Services for SAP In-Memory Appliance (SAP HANA)
- Organizations are eager to connect the vast amounts of data available within and outside their businesses to compete more effectively and make better... All BI and Analytics White Papers
- Quantifying the Business Value of VMware View - Webcast
- Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price...
- Good to Great - How to Take Business Analytics to the Next Level
- By attending this webcast you will learn how you can implement an effective BA strategy that will deliver maximum strategic value to your...
- Supporting Mobile Productivity With A Limited IT Budget
- Join us and hear from Kaseya mobile IT management experts as we discuss core strategies for supporting the mobile revolution on a shoestring...
- User Experience Monitoring
- In this webinar, you will learn hints & tips for improving end-user response times from Forrester Research analyst, Jean-Pierre Garbani.
- Hints & Tips Cisco
- Overwhelmed by tracking your Vblock, Flexpod or Cisco UCS performance? Spend one hour with Nimsoft to learn how you can eliminate the overhead... All BI and Analytics Webcasts