Quick Navigation
Managing risk and compliance in a regulated world
The continuing financial crisis dictates a new approach to regulations that will drive transparency requirements and risk management adoption.
Today's global enterprises are deeply intertwined and interdependent, regardless of its core business focus. New regulations will be broad and far reaching, and extend to the interconnectivity that defines today's IT infrastructure. For the IT organization, there are at least:
- Risk Centric: Rather than attempting to address all weaknesses, vulnerabilities and threats, organizations will be expected to prioritize and address problems based on the level of risk they pose.
- Controls: Given the new risk-centric attitude, the traditional enforcement points and capabilities such as strong authentication, role-based access control and data loss prevention will need to be enhanced to generate information and metrics in a larger context.
- Reporting Requirements: Reporting on risk is different than reporting on compliance. Reports produced by security information and event management solutions and sent to executive teams will likely expand to include gap analysis, simulations and likelihoods.
Download the White Paper, "The Coming Storm of Regulation" to understand how RSA is prepared to help customers effectively reduce risk, manage new regulations, achieve compliance and remain competitive.
Todd Graham, RSA Risk and Compliance, describes the advantages and process of cross-mapping government and industry regulatory requirements to reduce the cost and burden of assessing compliance.
