Monday, September 3, 2007

Compliance Testing

Compliance initiatives are moving into their second and third generation in many organizations, and the focus is shifting to testing and validation. When regulations such as Sarbanes-Oxley, The Patriot Act or HIPAA first emerged, the initial thrust was to document processes.
Documentation revealed flaws that created the second wave of compliance projects, which focused on change management and governance, both of which are fueled by the details of processes and data. These initiatives are shining the spotlight on testing and validation as a critical component in the compliance process. Testing provides several vital compliance components: the assurance that risk has been addressed as well as the traceability of how it was accomplished. Compliance dashboards and reporting are useless without complete and accurate information. Organizations are recognizing that compliance is a ground-up, quality-oriented initiative, not a stand alone project.
Compliance is not purely a data driven effort. Compliance looks at process and transformation as well. With Solstice's focus on step-by-step integrated processes across technologies, it is ideally suited to serve up the end-to-end perspective the compliance initiatives desire. Fortune 500 clients report that more than half of their critical data is behind the screens. Validation and testing techniques must delve into the integration framework to obtain the comprehensive data and process validation. Solstice provides the only enterprise-level, cross-protocol testing solution that provides a repeatable way of validating that this behind-the-screens data meets compliance standards.

No comments:

Counts