Com­pli­ance consultancy

Our con­sulting busi­ness started from the real­iz­a­tion that organ­iz­a­tions need to take a hol­istic view of com­pli­ance rather than con­cen­trate on a par­tic­ular reg­u­la­tion. Being ‘in com­pli­ance’ simply means that you comply with all rel­evant legal and reg­u­latory reg­u­la­tions in all the jur­is­dic­tions where you do busi­ness. How­ever, com­pli­ance is being pro­moted by many as a series of isol­ated require­ments such as FDA, SEC and GLB that a pack­aged solu­tion can meet. These ‘solu­tions’ may meet the indi­vidual require­ment but fail to provide adequate pro­tec­tion because they miss all the other requirements.

Together with our part­ners, we spe­cialize in the world­wide legal and reg­u­latory com­pli­ance require­ments for the fin­an­cial, life sci­ences, health­care and tele­com­mu­nic­a­tions indus­tries, and the tech­nical means of achieving these require­ments. Very few con­sultan­cies have the exper­i­ence and people to ser­vice this very com­plex need. We were founded, from our prac­tical exper­i­ence, to help organ­iz­a­tions under­stand their com­pli­ance needs and develop plans that will help them achieve compliance.

Examples of tasks we under­take include —

• Com­pli­ance Review. Under­standing a busi­ness and defining all the reg­u­la­tions and laws that apply.
• Gap Ana­lysis. This often fol­lows a com­pli­ance review, looking at the existing pro­ced­ures, pro­cesses and tools, and report on areas not covered.
• Sarbanes-​Oxley Read­i­ness Review. A very spe­cific review on how an organ­iz­a­tion meets the require­ments of SOX, but always with an indic­a­tion of where other factors may come in to play.
• Data Pri­vacy. Looking at the impact and require­ments of storing busi­ness records across mul­tiple jurisdictions.
• Com­pli­ance Work­shop. Com­pli­ance edu­ca­tion and start the pro­cess of becoming compliant.
• Email Archiving and Record Reten­tion. Con­sultancy on the require­ments, product cap­ab­il­ities, policies, and pro­ced­ures that are needed to achieve compliance.
• Using PKI. Explaining the issues of PKI and its use to underpin encryp­tion and digital sig­na­tures to help with require­ments for con­fid­en­ti­ality, authen­ti­city and integ­rity for reg­u­la­tions such as the H.I.P.A.A. and 21 CFR Part 11.
• Gen­eral Con­sultancy. Pro­vi­sion of spe­cific mem­bers of a com­pli­ance team from a pro­ject man­ager throught to writing and advising on spe­cific policy documents.

For the IT depart­ment, com­pli­ance require­ments can be broadly broken into two areas: inform­a­tion security and data man­age­ment. Addi­tional ser­vices that we can offer include —

• Pen­et­ra­tion Testing.
• Voice Authen­tic­a­tion.
• Iden­tity Man­age­ment Solutions.

For fur­ther details please email us.