compliance

What software developers need to know about product safety and other hardware compliance certifications.

Governance, risk assessment and compliance are boring; they're also the processes that let companies deal with the fall of one domino before it brings the whole chain down.

Group texting is free, easy and familiar; users will looove it, often avoiding systems built to comply with rules that specifically require text-tracking.

As enterprises approach a high level of maturity in their IT governance, risk and compliance (GRC) programs, they face a conundrum: How can they effectively implement and manage policies and their supporting controls to maintain a strong risk posture? To add to the difficulty, the environments they manage are often widely distributed and subject to multiple regulatory requirements and internal audit requirements, and must adapt to changing business needs. GRC tools are designed to help.

Even companies with good programs and good records on compliance can get hit with high fines and costs for errors IT can't prevent.

The cost of achieving regulatory security compliance is on average $3.5 million each year, according to a survey of 160 individuals leading the IT, privacy and audit efforts at 46 multinational organizations.

Cisco this week announced its intent to acquire privately-held Pari Networks, a provider of network configuration, change and compliance management appliances that was founded by former Cisco engineers.

It's SOX season again. As a publicly traded company, we have to comply with the Sarbanes-Oxley Act.

If faced with an auditor, or even worse, a court room, you will have to show due diligence and due care. Here are the 5 things you need to know and do (repeatedly) to maintain compliance.

Global businesses face tighter enforcement and more specific regulations, which are driving up costs and eroding security. A statement from one group demands changes, from governments that didn't listen to them the first time around.

While the community discussion ramps up for licensing compliance, how are these dualing enterprise Linux players faring with LSB compliance?