New Study by Ponemon Institute Confirms IT Compliance Efforts are Crippled by Poor Communication and Inefficiencies

Study shows that a risk-based approach is widely viewed as
the key to gaining control of access to critical systems and data

A new independent study from the Ponemon Institute, Audit & Compliance Professionals: Survey on Identity Compliance, examines the views of 845 auditors and corporate compliance staff on the state of compliance practices in their organizations, focusing on how they ensure proper access to systems and data.

Key survey findings point to a number of challenges, including:

  • Reliance on Manual Processes – The majority of audit and compliance staff manually monitor and test controls on user permissions and activities, depending almost exclusively on reports generated by others rather than software tools.
  • Lack of Centralized Control – Organizations no clear ownership of compliance oversight or processes around reporting on and monitoring user access. Fragmentation of data and distribution of responsibility among many groups are top two barriers to automating compliance.
  • Poor Communication and Collaboration – Majority report little to no collaboration with departments who share responsibility for IT compliance.
  • Inattention to Business Risk – Most organizations don’t focus their compliance resources or efforts based on risk, and the majority report the information necessary to quantify risk is simply not available.

This new report details the survey's findings and also compares them with responses from IT security professionals found in an earlier companion survey published by the Ponemon Institute in March 2007.

The comparison shows that both groups believe poor collaboration and reliance on manual processes are key barriers to compliance performance. But, they pursue different business objectives – audit/compliance groups want better control and security (44 percent) while IT groups seek higher efficiency (40 percent). Download the report to get the details and comparative analysis.

 

Please complete the questions below to go directly to the report.

*Please note, fields marked with an asterisk (*) are required.

First Name: *
Last Name: *
Title: *
*
*
Phone: * (please use only numbers)
Address:
City:
State/Province:
Zip:
Country:
Industry:
Interest in SailPoint:
Send me news & updates:
Capabilities of interest:
 

* If your browser is set to accept cookies, you will be recognized on subsequent visits and immediately granted access to the SailPoint Resource Center.