Feeds

Sweetening the pill of compliance

Lessons from financial services

Protecting against web application threats using SSL

Significant demands have been placed on the financial services sector as a result of compliance related requirements over the past three years, according to a study carried out by Freeform Dynamics involving the interview of 100 UK based IT managers from a range of Banking and Insurance organisations.

The study also reveals that while the importance of efficient and effective compliance solutions is well appreciated, fewer than half are satisfied with the ability of current measures to cope with future requirements in the areas of document management, archiving and retrieval. Gaps are even wider with regard to electronic messaging, where only one in twenty are fully satisfied with their capability.

And compliance is one issue that is not going away. Almost 60 per cent believe the compliance related burden on IT will increase over the coming three years, with a further 22 per cent saying it will not let up.

So how have compliance issues traditionally been dealt with and how might we better prepare ourselves for the future?

In the past, the emphasis has been placed on application specific initiatives and point solutions. But as more regulations have been introduced and current ones modified, it has become apparent that this is really just a band aid approach and a more overall compliance strategy is required. Also, as technology advances, more and more different types of data need to be recorded, stored and easily retrieved, not just for compliance, but as part and parcel of performing our day to day jobs. Opportunities therefore exist to tackle other business problems at the same time as compliance related requirements leading to a much more value oriented approach to investment.

So, simple as that then?

Well, not quite. In practice this involves the challenge of getting the right people round the table, dedicating time to mapping out existing processes, and looking at areas of overlap between necessary compliance related requirements and other business problems. If this can be achieved though, the cost benefit of moving forward with an architectural approach with a greater degree of reuse, flexibility and responsiveness becomes apparent.

The importance of getting the right people involved to create an atmosphere more conducive to breaking down budgetary boundaries is highlighted by the research. It is no coincidence that organisations who routinely involve IT management in the business planning process and vice-versa are much more likely to be moving down the architectural compliance route.

In practical terms, the nature of the transition to an architectural approach will obviously vary from organisation to organisation depending on the amount of fragmentation and legacy in their current IT landscape and budgetary constraints. While the respondents in the study place a higher emphasis on taking an architectural approach towards compliance in the future, they also acknowledge that there will still be a need for application specific initiatives and point solutions. Hopefully, the necessity for such measures will diminish over time, but it is important to be realistic in the shorter term.

For those interested in some guidance, the concept and practicalities of building compliance into the underlying architecture are discussed in greater detail in a paper by RedMonk entitled “SOA Meets Compliance: Compliance Oriented Architecture”, which is available free of charge from www.redmonk.com.

But at the end of the day, does taking a strategic architectural approach actually make a difference?

While evidence is limited due to the relatively recent introduction of this approach, early indications show that those organisations who have moved down the architectural compliance route feel significantly more confident in their ability to deal with future regulatory requirements. Perhaps these early movers in financial services can provide a lesson for the broader IT community.

Helen Vile is projects director at research firm Freeform Dynamics. More details of the research discussed in this article are included in a report entitled “Value Driven Compliance” which is available free of charge and may be requested here

Internet Security Threat Report 2014

More from The Register

next story
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
JINGS! Microsoft Bing called Scots indyref RIGHT!
Redmond sporran metrics get one in the ten ring
Driving with an Apple Watch could land you with a £100 FINE
Bad news for tech-addicted fanbois behind the wheel
Murdoch to Europe: Inflict MORE PAIN on Google, please
'Platform for piracy' must be punished, or it'll kill us in FIVE YEARS
Bono: Apple will sort out monetising music where the labels failed
Remastered so hard it would be difficult or impossible to master it again
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Found inside ISIS terror chap's laptop: CELINE DION tunes
REPORT: Stash of terrorist material found in Syria Dell box
Sony says year's losses will be FOUR TIMES DEEPER than thought
Losses of more than $2 BILLION loom over troubled Japanese corp
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.