Meta Compliance - taking the heat of compliance

According to my sources, if it comes to a court case involving employees mis-use or abuse of using corporate Internet facilities and confidential information, it's very hard to prove that the relevant policies were communicated, understood and signed off. This came as a bit of a surprise given that much is made of Acceptable Use Policies, company confidentiality, data loss prevention, customer information and the like. Surely organisations are ensuring that they communicate this information properly and manage the sign-off's by staff?

Nope, more often than not, this information is there, possibly published on the Intranet but with little ability to ensure that it is read, that it is understood and that it is signed. That means it's pretty much unenforceable in a court of law.

With our collaboration partners, Bridgeway Security, we're offering a very effective means of managing compliance, ensuring that policies are known, are read and are accepted. Furthermore that they are updated and re-circulated in an appropriate way to ensure that everyone is up-to-date. This really does take the heat out of the problem faced by a majority of organisations that need to keep track of this type of activity.

Here's what MetaCompliance can do:

 

		Enterprise	Advantage
Automate policy communication		•	•
Intelligent desktop delivery to ensure self-certification		•	•
Enforcement capabilities		•	•
Policy lifecycle management		•	•
Policy adoption reporting		•	•
Integration to E-learning/intranet, email and file launch		•	•
Intelligent scheduling		•	•
Unique targeting capabilities via Active Directory		•	•
Non Electronic module (additional costing)		•	•
Vendor/Partner Risk Management		•	•
User/Employee Compliance self-management		•	•
AD Replication for multi level targeting		•	•
Dynamic Intercept/Situational Awareness		•	•
Governance Lifecycle for Joiners & Leavers		•	•
Policy awareness & understanding assessment		•	•
Policy Exchange		•	•
Information Governance Approvals Workflow		•	•
Automation of Information Governance Maturity Model			•
Extensive Risk Assessment capabilities			•
User behaviour improvement reporting			•
Information Assurance Headline Reporting			•
Extensive Governance & Compliance Reporting			•
E-learning Connections			•

 

There's a lot more more to information security than securing your perimeter, it's very much a top down approach to resolving some of the difficult issues through modern means. We all use computers to do our day to day tasks but MetaCompliance can ensure that everyone that needs to know about policies are informed and the audit trail managed.

Not all organisations feel that they must be watertight in this regard and that's fine, but those that do, really do need to investigate how best to make the process work.

Comments

[INk toners]

your this line is best and covers whole post that is (There's a lot more more to information security than securing your perimeter). great post . Ink cartridges