Feature

GRC Tools Help Manage Regulations

Ezine

This article can also be found in the Premium Editorial Download "Information Security magazine: Five crucial virtualization do's and don'ts."

Download it now to read this article plus other related content.

Our goal was to create tests that address the promise of GRC while not favoring any particular technical strategy for getting there. We wanted to test the heart of GRC, the products' ability to:

  • Author, distribute and map policy and controls to the governing regulation, as well as to keep track of exceptions to those policies/regulations (compliance)
  • Assess the proper technical and non-technical operation of controls, and to mitigate/remediate areas where controls are lacking or not operating properly (governance)
  • Assist in quantification, analysis and mitigation of risk within the firm (risk)
Purchasing a GRC product is difficult, so we designed a flexible testing approach tied to real-world deployment scenarios to account for the range of corporate requirements, the expansive nature of the products and their varying levels of maturity. To do this, we foremost wanted to create a set of hypothetical scenarios that simulate how most organizations would typically use and deploy GRC products. We drew on real-life experiences and pain points to create regulatory, oversight and technical challenges, such as any organi- zation might face, and how the products might solve these challenges in a typical deployment context. Specifically, our goal was to test the "promises" of GRC (see "'Promising' Products," below).

    Requires Free Membership to View

This was first published in June 2008

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: