Sarbanes-Oxley Sparks Forensics Apps Interest

Vendors offer monitoring tools to help identify incidents of financial fraud

By Thomas Hoffman

March 29, 2004 12:00 PM ET

Computerworld - Most companies working on Sarbanes-Oxley projects are focused on documenting their internal controls to meet the compliance deadlines that start taking effect late this year. But the law's requirements are generating interest in using computer forensics tools to help identify potential cases of financial fraud.
For example, Avery Dennison Corp. is piloting software announced last week by Oversight Technologies Inc. that can be used to monitor finance systems for irregular transactions. Mark Van Holsbeck, director of enterprise security at Avery Dennison, said the software should reduce the amount of time workers at the Pasadena, Calif.-based maker of adhesive products now spend poring over printouts of financial data to determine whether any information has been altered or corrupted.
Avery Dennison's use of the Oversight tool wasn't driven by the mandates of the Sarbanes-Oxley Act, Van Holsbeck said. But the technology should help the company satisfy components of the financial reporting law, he added.
Similar Conclusion
Other users are expected to come to the same conclusion about computer forensics tools, which can track how data is used and modified.
Meta Group Inc. analyst John Van Decker said he expects to see an uptick in forensics technology investments related to Sarbanes-Oxley starting this summer. And Michael Rasmussen, an analyst at Forrester Research Inc., estimated that about a third of the clients he works with have put an investigative response plan in place, including the use of business intelligence tools and other technologies to monitor ERP and e-mail systems for evidence of potential wrongdoing.


Tracy Austin, CIO of Mandalay Resort Group

Universal Health Services Inc., a King of Prussia, Pa.-based company that operates hospitals and other medical facilities in various states, already has several fraud-detection systems in place that should now be able to help it meet the mandates set by Sarbanes-Oxley, said CIO Linda Reino.
For example, to prevent altered paychecks from being cashed, Reino said Universal Health has a homegrown system running on an IBM AS/400 server connected to applications at the bank that supports Universal's payroll operations.
Manny Abascal, a partner at Latham & Watkins LLP in Los Angeles, said that continually reviewing financial data will be a key facet of Sarbanes-Oxley compliance. "Some companies are thinking ahead so that if they find themselves in this position [where fraud is suspected], they're better able to find the data," he said.
Pricing for Oversight's monitoring tools starts at $85,000 and, depending on the number of end users, can go up to about $200,000, according to CEO Patrick Taylor.
Other vendors of forensics toolsinclude Guidance Software Inc., Consul Risk Management Inc. and Addamark Technologies Inc., which this week plans to announce upgraded software for storing system log data.
Mandalay Resort Group in Las Vegas provides gaming agencies with information to demonstrate its data-protection procedures. But CIO Tracy Austin said those efforts haven't used computer forensics, and the hotel and casino operator hasn't made plans to invest in the tools to aid in Sarbanes-Oxley compliance. For now, Mandalay "is primarily focused on documenting internal controls," Austin added.

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Additional Resources

POLL RESULTS

Leading IT Pros Weigh In on Top IT Issues

Accelerate your knowledge of the IT world you inhabit by viewing the results of a series of polls taken by your IT peers. These polls of 100+ IT professionals each are available for full viewing. They cover key topics such as virtualization, processor performance, green IT, cloud computing and many others. Be a part of the buzz.

WHITE PAPER

For Best Results, Think Beyond the Box

Technology is complex. Keeping it running productively shouldn't be. To that end, you want to minimize the number of solutions needed in-house to simplify operations, maintenance, and support. Kodak offers a best-practices model. One company provides support for both scanner and software, for fast problem resolution without vendor finger-pointing. Download now!

WHITE PAPER

Accelerating the Path to Demand Intelligence with a Demand Signal Repository

Utilizing demand intelligence improves the precision of pricing, product assortments, channel/store placement, and promotion, which are all essential for sustainable revenue management performance. Learn more, download this free whitepaper today.

White Papers & Webcasts

Tech Horizons: ASG's metaCMDB, The Technology That Rocks
Improved business productivity often requires more efficient IT and more efficient IT cannot be achieved without a better understanding of the way business...

How to Reduce Eclipse BIRT Development Effort for Data Visualizations
Web applications can come with a long list of visualization requirements for structured data. By delivering your output through the BIRT Interactive Viewer,...

Mitigating Litigation Risk with Email Management Tools
Does your company have an email retention policy that protects it when litigation occurs? IDC discusses effective email retention policies and the role...

Legacy IT Modernization - Practical Reality
(Source: BluePhoenix) Corporate budgets continue to tighten. Organizations are looking at ways to reduce operating costs and eliminate unnecessary expenses while at the...

Sun GlassFish Portfolio - Deploy Web Applications with Open Source
As enterprises struggle to develop and deliver new and more dynamic services to more people, they must do so with severe budget constraints....

Interactive Guide: Getting Started with Data Governance
In this online interactive guide, Andrew White, Research VP with lead analyst firm Gartner, answers these questions to help get you on the...

The necessary convergence of IT and Facilities
If IT and Facilities could work collaboratively, organizations can operate more efficiently and effectively while still meeting their business objectives. That's why Eaton®...

Why Now is the Right Time for the Linux Desktop
(Source: Novell) Faced with tighter budgets, enterprises are rethinking their desktop strategies to deliver the same - if not better - services and...

Is your data center ready for virtualization?
Virtualization can deliver dramatic benefits for data centers, but it can also stress the underlying support infrastructure. Power and cooling systems - which...

Agile Enterprise Content Management (ECM) for Rapid ROI
(Source: IBM) Content rich business processes are a core feature of daily operations at just about any organization today. Very often these essential...

All White Papers | All Webcasts