 |
|
|
|
|
Data centre IT security and compliance
This section provides information on the various aspects of managing compliance operations at your company, with news, advice and best practices on managing compliance teams, handling compliance reporting, automating processes and responding to audits. There's some new thinking when it comes to meeting compliance regulations that says rather than trying to keep up with every new mandate, companies should instead focus on the risks to the business, be they operational, financial or environmental, and implement controls and processes to protect against them. The theory goes that managing compliance this way helps keep costs under control as there are fewer redundant controls and disparate processes that result when companies take an ad hoc approach to compliance. It's tough to pull off however. It requires that an organisation define its risk appetite, create an inventory of the compliance obligations it faces, understand the threats that put the various aspects of the business at risk, identify vulnerabilities, implement the controls and processes that mitigate those threats, measure the residual risk against the organisation's risk appetite and recalibrate its risk appetite to reflect internal and external changes in the threat landscape. These guidelines are not for the faint-hearted and probably require a certain level of maturity within an organisation to pull off. But if you are ready for a more strategic approach to compliance, then this section will help you with guides on a risk management-based approach to compliance.
|
|
 |
|
|
|
