Intro­duc­tion

The most important aspect of com­pli­ance is main­taining the neces­sary busi­ness records to demon­strate to the reg­u­lator that you have car­ried out your reg­u­latory oblig­a­tions or to demon­strate to the courts that you have met your legal oblig­a­tions. To meet these needs we developed Undeni­able®, a product that provides a com­pli­ance infra­struc­ture to underpin an organization’s IT sys­tems. In doing so, it greatly sim­pli­fies the pro­cess of achieving and remaining com­pliant for the vast majority of organizations.

We designed Undeni­able from the outset to con­form with legal and reg­u­latory require­ments, in con­trast to tech­no­logy solu­tions that are all too often designed to meet tech­nical require­ments and which then claim con­form­ance to the reg­u­latory requirements.

Undeni­able con­sists of a com­pre­hensive set of policies, pro­ced­ures and pro­cesses, together with expert sup­port, to help a client organ­iz­a­tion imple­ment and manage the solu­tion. It is struc­tured to enable the organ­iz­a­tion to under­take a rapid, yet com­pre­hensive review of its activ­ities, spe­cific­ally of the legal and reg­u­latory oblig­a­tions which derive from those activ­ities. It also enables the client to review the infra­struc­ture that it cur­rently has in place to sup­port those activ­ities. The pro­cess is entirely inde­pendent of the sector or jur­is­dic­tion within which it operates.

Risk and obligations

Organ­iz­a­tions today face a seem­ingly never-​ending growth of elec­tronic inform­a­tion and data gen­er­ated by their everyday activ­ities. This inform­a­tion or data could expose them to any number of risks. The com­plex legal and reg­u­latory land­scapes within which they operate simply add to this burden, and organ­iz­a­tions and inter­ested third parties find it dif­fi­cult to assess the ever increasing risks that they face.

In order to remove the burden that they face cur­rently, organ­iz­a­tions need a com­pre­hensive inform­a­tion gov­ernance solu­tion that —

• enables the dir­ectors of an organ­iz­a­tion to demon­strate to all parties, both internal and external, that they under­stand its activ­ities, that they under­stand the risks and oblig­a­tions that arise from those activ­ities, that they have ensured that it sat­is­fies those oblig­a­tions, and that they can manage and, where pos­sible, reduce its exposure to those risks;
• provides a rapid and cost effective means by which the dir­ectors, audit com­mit­tees, external aud­itors, and other parties can audit the organization’s under­standing of its oblig­a­tions, of how it sat­is­fies those oblig­a­tions, of the risks that it faces, of its ability to manage and mit­igate those risks, and of its internal con­trols; and
• enables the dir­ectors to ensure that the organ­iz­a­tion can manage its inform­a­tion and data in such a way that they can be sure that it uses its inform­a­tion law­fully and can con­tinue to do so.

Undeni­able is that solution.

For fur­ther details please see the white­paper ‘An inform­a­tion gov­ernance frame­work to reduce risk’ or email us.

The solu­tion

The solu­tion is a com­pre­hensive set of policies, pro­ced­ures and pro­cesses, together with a set of con­sultancy ser­vices to help organ­iz­a­tions imple­ment and manage the solu­tion. It is struc­tured to enable the organ­iz­a­tion to under­take a rapid, yet com­pre­hensive review of its activ­ities, spe­cific­ally of the legal and reg­u­latory oblig­a­tions which derive from those activ­ities, and of the infra­struc­ture that it cur­rently has in place to sup­port those activ­ities. This is entirely inde­pendent of the sector or jur­is­dic­tion within which it operates.

This ensures that the dir­ectors can be sure that the organ­iz­a­tion tar­gets it spending on inform­a­tion tech­no­logy cor­rectly. The dir­ectors will know that their organization’s infra­struc­ture will fully sup­port its busi­ness drivers, and enable them to meet their and their organization’s legal and reg­u­latory drivers. It provides the organ­iz­a­tion with com­pre­hensive inform­a­tion governance.

The solu­tion becomes the nat­ural focal point for the organization’s policies, pro­ced­ures, and pro­cesses. It encour­ages the organ­iz­a­tion to review its activ­ities, and the res­ulting drivers and require­ments on a peri­odic basis, and to feed any changes back into the solu­tion itself. The solu­tion adapts and changes as the organization’s drivers change.

A common platform

Con­sultancy services

We offer a variety of con­sulting ser­vices around the solu­tion. These include a ser­vice spe­cific­ally designed to help an organ­iz­a­tion imple­ment the solu­tion, tailored ser­vices to help that organ­iz­a­tion manage and admin­ister the solu­tion, and annual or six-​monthly health checks after the organ­iz­a­tion imple­ments the solution.

Imple­ment­a­tion service

The imple­ment­a­tion ser­vice con­sists of a defined set of stages. The first of these, the gap ana­lysis or survey, is usu­ally car­ried out as a sep­arate ser­vice. The remaining stages, from policy defin­i­tion through to imple­ment­a­tion make up the imple­ment­a­tion service.

These stages are iter­ative, and are designed to not only guide the organ­iz­a­tion to imple­ment the solu­tion rap­idly, but to become the basis for the pro­cess by which the organ­iz­a­tion and its dir­ectors admin­ister, review, test, and audit the res­ulting infra­struc­ture, policies, pro­cess, and procedures.

Con­clu­sion

The solu­tion provides the dir­ectors, audit com­mit­tees, aud­itors and other third parties with an effective way to audit an organization’s under­standing of, and its con­form­ance to its obligations.

It provides a rapid and cost effective means of identi­fying the weak­nesses in an organization’s under­standing and man­age­ment of the risks that it faces, irre­spective of the jur­is­dic­tions or sec­tors within which it oper­ates, and it provides the means to address and cor­rect those weaknesses.

The solu­tion will not only pro­tect the repu­ta­tion of an organ­iz­a­tion. It will also pro­tect the repu­ta­tions of the dir­ectors, and the mem­bers of the audit committee.

For fur­ther details please see the white­paper ‘Undeni­able — an over­view’ or email us.