Things IT needs to do for compliance in a private company?

Posted by SQL Baba on Server Fault See other posts from Server Fault or by SQL Baba
Published on 2010-04-16T00:31:30Z Indexed on 2010/04/16 0:33 UTC
Read the original article Hit count: 384

Filed under:

Compliance

|

pci-compliant

|

sox

My company is a private, family owned business. The company is head quartered in USA and also runs businesses in several countries including Mexico, UK, Canada, Carribean islands and few other countries in S.America.

Me and my boss had a discussion over lunch regarding IT compliance and we wondered what kind of mail archiving solution we need to pursue and what are the other IT related compliance we need to pursue.

Our processes include online and phone based sales, phone based customer support, w-9 (SSN and EIN) verification, etc.

© Server Fault or respective owner

Related posts about Compliance

EM12c Release 4: New Compliance features including DB STIG Standard

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Normal 0 false false false EN-US X-NONE X-NONE MicrosoftInternetExplorer4 Enterprise Manager’s compliance… >>> More
Evaluating Solutions to Manage Product Compliance? Don't Wait Much Longer

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Depending on severity, product compliance issues can cause all sorts of problems from run-away budgets to business closures. But effective policies and safeguards can create a strong foundation for innovation, productivity, market penetration and competitive advantage. If you’ve been putting off… >>> More
PWC and Oracle Discuss Governance, Risk, and Compliance Best Practices for Segregation of Duties Man

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Jannie Wentzel from PriceWaterhouseCoopers LLP and Lane Leskela, Oracle's Senior Product Marketing Director for Governance, Risk and Compliance, speak with Fred about how Oracle and PWC make it easier for customers to manage SoD. >>> More
How Oracle Governance, Risk, and Compliance Supports New SEC and PCAOB Guidance on SOX

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Angela Carter, a partner in KPMG's Risk Advisory practice and Stephanie Holmeen, Director, Applications Product Marketing speak with Fred about the new SEC and PCAOB guidance on Section 404 of the Sarbanes-Oxley Act and Oracle's Governance, Risk, and Compliance solutions. >>> More
Regulatory Compliance for Public Organizations - Achieving Stronger Controls and Better Management P

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Stephanie Holmeen, Product Marketing Director, GRC Applications, Oracle and Gregory Williams, Washington Federal Practice, Director, PricewaterhouseCoopers discuss how public administrations can achieve greater control over their dispersed compliance program and minimize their risk using Oracle's… >>> More

Related posts about pci-compliant

How can I configure a PCI compliant development environment

as seen on Stack Overflow - Search for 'Stack Overflow'
We need to be PCI compliant for some credit card processing we do. How do people do this in other shops? How do you secure your SVN? How do you secure your build server? How does code get migrated from the developers to production? >>> More
Options for PCI-DSS 11.5 - Deploy file integrity monitoring software

as seen on Server Fault - Search for 'Server Fault'
I'm looking for options to be compliant with PCI-DSS section 11.5 for some servers I manage at the datacenter. There are several servers (less than 20) and they are mostly CentOS5, but there are some RHEL4 and Solaris9 Sparc. I believe Tripwire, Inc. is the leader in this area, but I am looking for… >>> More
Things IT needs to do for compliance in a private company?

as seen on Server Fault - Search for 'Server Fault'
My company is a private, family owned business. The company is head quartered in USA and also runs businesses in several countries including Mexico, UK, Canada, Carribean islands and few other countries in S.America. Me and my boss had a discussion over lunch regarding IT compliance and we wondered… >>> More
authorize.net SIM PCI compliance

as seen on Pro Webmasters - Search for 'Pro Webmasters'
Does anyone know if authorize.net's SIM rids you of having to be PCI compliant? The payment form is hosted on authorize.net's site and they're processing the payment. I know you can do a relay response which basically puts some of the transaction details in a url that goes back to your website(to… >>> More
Storing Cards and PCI Compliance

as seen on Server Fault - Search for 'Server Fault'
I'm developing a SaaS service and will be managing payments as a merchant for customers, and since we'll be using multipe payment processors depending on users location, amount and other factors so its important to store card details. I did some research and from what I understood all you need is… >>> More