Compliance issues for IT security

(MSPAlliance) – Thursday, April 27, 2006 – Siemens has launched a new Wi-Fi hardware and software package called Hi-Path Wireless Advanced.  The package complies with several government regulations, including Sarbanes-Oxley, HIPAA, Gramm-Leahy-Billey and the Department of Defense Directive 8100.2.

Using Siemens’ software, auditors can see vital details such as which channels data is running on, how many files have been recently encrypted and what access points were available but not on the system.  Companies need to look not only at technology, but also the processes involved in ensuring acceptable compliance with auditors.

However, companies have not been focusing on compliance with the Sarbanes-Oxley act, requiring financial accounting and disclosure.  Section 404 of the act requires companies to file a SAS 70 report from service providers to evaluate that your system is in compliance in terms of controls, operations, security, backup and system availability.  Companies should make sure that IT service providers are SAS 70 certified, though this may be easier said than done.

About MSPAlliance

Founded in 2000, MSPAlliance is the world’s largest community for managed service providers. Free membership gives you access to resources, research, and certification programs that help you build a mature, compliant, and trusted MSP business.  Click here to apply.

more insights