Wednesday, 31 January 2007

OpenPages 5.0 Overview

OpenPages' Governance Platform 5.0, focuses on the web of regulatory mandates that companies have to comply with.

Claimed benefits of the new release include:-

Manage risk and compliance across a multitude of regulations, including financial reporting, privacy, industry and more

Understand the interdependencies between processes, risks and controls that are shared across business units and regulations to help companies better manage the critical risks that have the biggest effect on performance

Implement a unified and simplified approach to managing enterprise risk to reduce redundancy, minimize complexity and maximize efficiency

Two modules are added. OpenPages GCM aims to identify similarities between regulations to reduced redunandcy and duplication of effort. The module at the same time automates the test, review, attestation and remediation of compliance processes.

OpenPagesITG facilitates Information Technology (IT) governance by aligning IT process, policy, risk and operations management with corporate business initiatives, strategy, and operational standards. OpenPages base their claims on a core-shared services open architecture.


Existing modules have been updated. OpenPages ORM now supports extensions to loss events as well as a comprehensive scenario analysis capability. OpenPages ORM can also integrate with external loss databases to provide enhanced analysis and decision-support capabilities for risk professionals.

OpenPages FCM, which focuses on the Sarbanes-Oxley Act has been enhanced.

OpenPages 5.0 Overview

OpenPages' Governance Platform 5.0, focuses on the web of regulatory mandates that companies have to comply with.

Claimed benefits of the new release include:-

Manage risk and compliance across a multitude of regulations, including financial reporting, privacy, industry and more

Understand the interdependencies between processes, risks and controls that are shared across business units and regulations to help companies better manage the critical risks that have the biggest effect on performance

Implement a unified and simplified approach to managing enterprise risk to reduce redundancy, minimize complexity and maximize efficiency

Two modules are added. OpenPages GCM aims to identify similarities between regulations to reduced redunandcy and duplication of effort. The module at the same time automates the test, review, attestation and remediation of compliance processes.

OpenPagesITG facilitates Information Technology (IT) governance by aligning IT process, policy, risk and operations management with corporate business initiatives, strategy, and operational standards. OpenPages base their claims on a core-shared services open architecture.


Existing modules have been updated. OpenPages ORM now supports extensions to loss events as well as a comprehensive scenario analysis capability. OpenPages ORM can also integrate with external loss databases to provide enhanced analysis and decision-support capabilities for risk professionals.

OpenPages FCM, which focuses on the Sarbanes-Oxley Act has been enhanced.

Tuesday, 30 January 2007

OpenPages 5.0 Launched

OpenPages a vendor of governance, risk and compliance management solutions has announced the launch of its flagship application, OpenPages 5.0.

The application is most widely associated with the Sarbanes-Oxley Act. In particular the requirement for a company to give assurance over internal controls relating to financial reporting.

Complexity of managing risk in IT operations and compliance with multiple regulatory manadates are the focus of mandates.

More information can be found at http://www.openpages.com/

elQnetworks IT Risk Management Launched

eIQnetworks has launched an integrated enterprise IT risk management platform. The SecureVue application offers Security Information and Event Management (SIEM), asset, configuration, performance and vulnerability data.

The five functions outlined above are spread across layers of the IT infrastructure, including application, networ and server layers. eIQnetworks claims an end-to-end consolidated view of enterprise security and risk posture.

"Companies are struggling to address complicated information security challenges, regulatory compliance requirements and the rapid emergence of new threats in an environment of budget limitations, inefficient risk management technologies and broken processes," said Jon Oltsik, senior analyst at Enterprise Strategy Group. "eIQnetworks' SecureVue collects, consolidates and analyzes critical security information, helping enterprises close this gap. This can result in better protection and operational efficiency."

IT Auditor from Verifichi

Verifichi has launched a configuration management datawarehouse application, IT Auditor. The solution is designed to audt and IT infrastructure's servers, attached storage and applicants regardless of operating system.

Upon installation, IT Auditor automatically discovers the configuration data related to the IT infrastructure. Its' non-invasive and easy-to- implement architecture allows organizations to monitor infrastructure unobtrusively, providing an "out-of-band" independent assessment.

Deborah McCarthy, Verifichi's CFO, said, "By using IT Auditor, companies can show approval of monitoring standards, while also maintaining a historical record of what changes were made to standards. Our real-time reporting includes a compliance scorecard, operational report and detailed compliance report. Initial feedback from customers has been overwhelmingly favorable."

Sarbanes-Oxley again is the business driver to buy IT Auditor. The requirement to furnish reports on the satisfactory nature of the company's controls over financial reporting makes a heavy load on IT management. Servers can be compared to makeke sure they conform to government regulations. SOX and the HIPAA are legislative. ITIL, COSO and COBIT also play a part.

Monday, 29 January 2007

Texas State Bank and PGP

Texas State Bank has implemented the PGP Encryption platform to secure confidential information at the gateway. PGP(R) Desktop Email on clients. Data over the Internet will be protected by PGP(R) Command Line to encrypt it.

The usual suspects, Sarbanes-Oxley, Gramm-Leach-Billey and the U.S. Right to Financial Privacy Acts are cited as the reason for the implementation.

"PGP Universal Gateway Email was easy to install and integrate with our existing IT infrastructure," said Karen M. Gayhart, senior vice president for Network Operations at Texas State Bank. "With the PGP solution, we've been able to shift customer and partner communications from written correspondence and phone conversations to email, which is much more cost-effective."