LogBlog

« RedHerring 100 Finalist & New Sales VP | Main | What To Look For In A Service-level Agreement »

Log Fear

Fear can be a powerful motivator. It is driving many companies to accelerate their compliance efforts and accelerate others - such as information protection. These broad-based priorities are also driving demand for log management and intelligence.


Stephen Wagner and Lee Dittmar hit on the power of fear as a motivator in a current issue of the Harvard Business Review - and how as a result smart companies are finding unexpected benefits in Sarbanes-Oxley compliance. Some of the highlights are pulled out over at ComputerWorld - here they are with a few annotations from us:


What were some of the big control gaps that early Sarbanes-Oxley compliance efforts uncovered?


WAGNER: One of requirements of internal controls is maintenance of records in reasonable detail that reflect transactions. We found [that] in many instances, control documentation was way behind or didn't exist.


[We see this often when implementing LMI platforms - previous approaches meant Log data was being edited down to serve applications - often SIEM; not correctly captured; and, randomly stored].


DITTMAR: And organizations didn't know what their control programs consisted of. They knew they had them, but as one told me, it was "kind of tribal." There was no consistency in how they did it. We found uncontrolled access to systems that are important to maintaining the integrity of financial reporting.


[We see the same. Log data can automate reporting, alerting and enforcement of controls. But you need controls to start with.]


LMI plays a key role in any compliance effort and this piece throws more light on the best practices that should underpin it.

Posted April 11, 2006 in LogLogic News | Permalink


TrackBack

TrackBack URL for this entry:
http://www.loglogic.com/mt/mt-tb.cgi/46

Visit loglogic.com

I ♥ Logs

Subscribe to this blog’s feed RSS

November 2007
Sun Mon Tue Wed Thu Fri Sat
        1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30  
Categories
Archives
Blogroll
Blogroll
Compliance
Good Reading
LogLogic
LogLogic Partners
Sites We Watch