News

Managing compliance operations

• December 01, 2016 01 Dec'16

  Trump presidency raises questions for regulatory compliance

  The future of regulatory compliance is under scrutiny as President-elect Donald Trump's administration continues the transition process. Also in recent GRC news: Hackers demanded ransom after ...

• September 16, 2016 16 Sep'16

  Company culture essential to strong ethics and compliance program

  Last week, San Francisco-based Wells Fargo bank was fined $185 million because employees opened two million unauthorized bank and credit card accounts. About 5,300 employees associated with this ...

• December 09, 2015 09 Dec'15

  New York proposes banking rules to block terrorism funding

  The governor of New York has introduced new state banking rules designed to curb money laundering and block terrorism funding. Also in recent GRC news: Most healthcare organizations lack ...

• November 25, 2015 25 Nov'15

  Privacy vs. public safety remains central to encryption debate

  In the wake of the horrific attacks in Paris earlier this month, government and intelligence officials pointed a finger at end-to-end encryption (E2EE) and how it enabled attackers to "go dark" -- ...

• November 18, 2015 18 Nov'15

  Beyond BYOD: How new tech is driving digital information governance

  (This blog post was written by Diane K. Carlisle, executive director of content at ARMA International.) Day by day, effective information governance (IG) is made more urgent and more complicated by ...

• November 12, 2015 12 Nov'15

  Fed Chair says regulatory compliance problems persist at large banks

  In recent regulatory compliance news, the Federal Reserve Chairwoman testified before a House panel that very large U.S. banks still experience "substantial" GRC management failures; recent ...

• October 29, 2015 29 Oct'15

  Goldman Sachs faces $50 million fine to settle document leak case

  This week, Goldman Sachs agreed to pay a $50 million fine to settle a case in which a former employee leaked confidential information from the New York Fed. Also in the news: Bristol-Myers Squibb ...

• October 15, 2015 15 Oct'15

  What's compliance worth to the business?

  In part one of this blog post, we unpack the drivers behind the surge of demand on compliance investments and skilled staff, including new agencies that take a behavior-based approached to ...

• October 15, 2015 15 Oct'15

  As regulatory wave swells, boards put new focus on compliance functions

  Boards of directors are increasingly seeing the value of regulatory compliance, as the past year has seen a worldwide spike in compliance spending and the hiring of skilled compliance staff, ...

• September 30, 2015 30 Sep'15

  Fitbit achieves HIPAA compliance, targets more corporate customers

  Wearable fitness tracker company Fitbit recently announced that its devices are now HIPAA-compliant, broadening the types of businesses it aims to work with. Also in recent GRC news: CFOs report ...

• September 16, 2015 16 Sep'15

  Court rules that Dodd-Frank protects internal whistleblowers

  The Second U.S. Circuit Court last week decided that whistleblowers who report internally before going to the SEC are covered by Dodd-Frank's anti-retaliation rules. In other recent GRC headlines: ...

• September 02, 2015 02 Sep'15

  Apple CEO Tim Cook's email may have violated SEC disclosure rules

  Lawyers say Apple CEO Tim Cook may have flouted the Securities and Exchange Commission's fair-disclosure regulation when he sent a CNBC correspondent an email containing company performance ...

• August 27, 2015 27 Aug'15

  Information governance key to compliance automation success

  (This blog post was written by Diane K. Carlisle, executive director of content at ARMA International.) So, your attempt to manage the governance, risk, and compliance (GRC) program with a series ...

• August 19, 2015 19 Aug'15

  SEC greenlights Dodd-Frank pay-ratio rule, backs internal whistleblowers

  The U.S. Securities and Exchange Commission (SEC) announced this month that it has approved a contentious pay-ratio rule first introduced by the Dodd-Frank Act five years ago. Also in recent ...

• August 05, 2015 05 Aug'15

  DOJ enlists compliance counsel to determine corruption charges

  The U.S. Justice Department is in the process of taking on a compliance specialist to help determine whether to prosecute companies charged with foreign bribery. Also in recent GRC news: Mead ...

• July 31, 2015 31 Jul'15

  Finance firms spend millions on compliance, but lack long-term strategy

  Numerous regulations were introduced worldwide to make financial services institutions more resilient following the monetary crisis of 2007 to 2008. Now, these regulations, which global management ...

• July 22, 2015 22 Jul'15

  Dodd-Frank creators discuss the law's impact; SEC leads FIFA bribery probe

  Five years after the Dodd-Frank Act was enacted, the creators of the law contemplate the wide-ranging legislation's impact on the financial and banking industries. Also in recent GRC news: The SEC ...

• July 09, 2015 09 Jul'15

  SEC commissioner calls for expanded Reg SCI; PCI SCC updates P2P standard

  SEC commissioner Luis Aguilar strongly urged his colleagues at a cybersecurity conference last month to push Reg SCI up on their priority lists, particularly in terms of widening the regulation's ...

• June 25, 2015 25 Jun'15

  Hackers had access to U.S. government data for a year

  The U.S. government data breach announced last week began a year ago, giving the perpetrators plenty of time to access federal employees' personal information, according to the NSA. Also in recent ...

• June 12, 2015 12 Jun'15

  Panel offers C-level temperature on security as IoT gains steam

  (This blog post was written by Aislyn Fredsall, an editorial assistant for the TechTarget CIO media group through Northeastern University's co-op program.) Is security no longer a major concern for ...

• June 11, 2015 11 Jun'15

  U.S. government breach could have accessed private citizens' data

  U.S. officials say the recent hack of government computer systems affects 4 million current and former federal employees, but the breach could have impacted private citizens, too. Also in the news: ...

• June 05, 2015 05 Jun'15

  Data as currency: Balancing risk vs. reward

  (This blog post was written by Jeff Whited, senior manager of education development at ARMA International.) By leveraging big data as an asset, organizations are tapping new business efficiencies ...

• May 28, 2015 28 May'15

  Wall Street, small banks still plagued by regulatory compliance enforcement

  If recent headlines are any indication, Wall Street banks and other financial institutions continue to garner poor marks when it comes to regulatory compliance: Earlier this month, several major ...

• May 06, 2015 06 May'15

  SEC calls for more executive pay transparency; proposed law could allow hacked firms to keep mum

  The Securities and Exchange Commission (SEC) is pushing to provide U.S. shareholders with better metrics to compare executive pay against company performance. In other GRC headlines from recent ...

• April 22, 2015 22 Apr'15

  Lawmakers race to pass cybersecurity bill; NSA wants front door into encrypted devices

  Much to the chagrin of privacy advocates, U.S. legislators have been pushing to pass a bill to improve cyberthreat intelligence sharing before discussing National Security Agency (NSA) surveillance ...

• April 08, 2015 08 Apr'15

  New U.S. sanctions target foreign hackers; Facebook battles EU over privacy

  Following the recent streak of high-profile cyberattacks on U.S. companies, the Obama administration last week unveiled a program that would impose sanctions on individuals or groups overseas that ...

• March 26, 2015 26 Mar'15

  FBI takes a step toward broader hacking authority; most companies fail PCI compliance tests

  The FBI's quest to expand its hacking authority moved forward last week: A judicial advisory panel approved a rule change regarding how flexible judges can be in granting search warrants outside ...

• March 11, 2015 11 Mar'15

  Will weak incentives for security investment force regulatory intervention?

  Data breaches have been intensifying in recent years, but security expert Benjamin Dean argues that many companies still lack motivation to invest in more robust information security. Also in ...

• February 26, 2015 26 Feb'15

  AT&T's high-speed service comes with a privacy fee; Google bows to privacy spot checks

  AT&T's has begun rollout of a fiber-optic Internet service that furnishes customers with high-speed access, but they must pay an extra monthly charge if they want to keep their browsing habits ...

• February 11, 2015 11 Feb'15

  FCC chairman urges strong Internet regulation; Anthem breach might set a precedent

  In a bold effort to ensure net neutrality, FCC Chairman Tom Wheeler has proposed a new set of rules that would treat the Internet as a public utility and prohibit pay-to-play fast lanes. Also in ...

• January 20, 2015 20 Jan'15

  Website offers hackers for hire; Obama pushes new data privacy laws

  Hackers may have found a way to commercialize their services as individuals begin to seek "hackers for hire" to carry out low-profile cyberintrusions. In other recent governance, risk and ...

• January 07, 2015 07 Jan'15

  More U.S. firms look to hack back after Sony data breach

  Business cybersecurity -- or the lack thereof -- continued to make headlines in the past few weeks as more U.S. private-sector firms consider counteroffensive tactics against attackers. Also in ...

• April 15, 2013 15 Apr'13

  Eight principles of information governance and risk management

  (This blog post was written by Marilyn Bier, chief executive officer of ARMA International.) Organizations depend on information to manage day-to-day operations, comply with regulations, gauge ...

• January 18, 2013 18 Jan'13

  Considering a career in compliance? Heed these warnings first

  So you want to pursue a career in compliance? I can't really blame you. With a median salary of more than $60,000, it can certainly pay off -- and the sky's the limit moving forward. Of course, ...

• May 08, 2012 08 May'12

  Five corporate compliance program traits you need to prevent breaches

  If you look at news headlines, you’d think the sky were falling with all of the hack attacks and subsequent data breaches taking place. Just glancing at the Chronology of Data Breaches says it all. ...

• December 06, 2011 06 Dec'11

  The top 10 compliance risk management questions you should be asking

  When it comes to IT governance, it's one thing to have staff completing compliance risk management processes; it's quite another to be confident that everything is indeed in line and secure. ...

• October 17, 2011 17 Oct'11

  Seven common regulatory compliance requirement assumptions to avoid

  Compliance means different things to different people. Indeed, regulatory compliance requirements are -- and should be -- handled differently based on the unique needs of the business. The ugly ...

• July 23, 2010 23 Jul'10

  How to meet compliance regulations with Windows Active Directory

  IT Compliance Advisor welcomes our new blogger, Frank Ohlhorst: Meeting the needs of compliance regulations effectively means that IT staffers must be able to monitor and report on any activity ...

• March 19, 2009 19 Mar'09

  How do you align an IT risk assessment with COBIT controls?

  [One of our readers, compliance officer Ramon de Bruijn, wrote to the editors of SearchCompliance.com at editor@searchcompliance.com last month looking for some advice. Specifically, he asked "What ...

• January 09, 2008 09 Jan'08

  Drafting data classification policies and guidelines

  Shon Harris suggests ways to draft an internal procedure on how to handle confidential data. She discusses data classification polices, steps to develop and roll out a data classification program, and what your guidelines should cover.