Managing Compliance: Establishing a Technology Compliance Office

by Catherine L. Szpindor

Be honest. How well are you managing your compliance to technical regulations, requirements, policies, and procedures? With the onset of the Health Insurance Portability and Accountability Act (HIPAA), Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), Customer Propriety Network Information (CPNI), and state privacy regulations, organizations are challenged to manage all of the requirements. Meanwhile, data breaches continue to happen, exposing sensitive corporate financial and proprietary information, including personally identifiable information (PII) of employees and customers. The potential monetary and legal ramifications to a corporation can be significant.