Section 404 of the Sarbanes-Oxley Act requires that your annual report features an independent assessment of the effectiveness of your company’s internal controls
Under the Act, as a director of any company listed in the US, you must ensure that adequate and effective internal controls are in place to prevent fraudulent accounting practices. This includes controls to ensure that only authorized personnel can update financial information. Failure to comply with this requirement could mean a 20-year jail sentence.
Defender 5 delivers an easy-to-use, cost-effective and reliable user authentication system based on industry standards, to give you the peace of mind that the next review from your security auditors will be a favourable one, and ensure that you stay on the right side of the law. Defender 5 also provides a full access audit for every system it is protecting. This gives you a centralized log defining who is accessing what and when for each of your systems.
For organizations "significantly engaged" in providing financial products or services, you should also be considering the Safeguards Rule of the Gramm-Leach-Bliley Act (1999). If your company holds financial information about customers, you must implement safeguards to protect its security and confidentiality. Defaulters can look forward to a heavy fine, or an injunction. |
Moreover, any European organization holding data about any living person is required, under Data Protection law, to adopt appropriate measures to protect the information from unauthorized disclosure and tampering. Banks the world over are required to consider similar measures under the Basel II Accord, which came into force in 2006. The UK government is already committed to compliance with the Information Security Standard (BS7799), which requires that strong authentication measures are considered for network access control and operating system control.
PassGo offers a range of solutions, including Defender 5, to help organizations comply with a spectrum of global regulations directing the protection of company information.
For all these reasons, it makes sense to play safe, and adopt Defender 5 as a key component in your information assurance strategy. |