IBM Rational® software provides a scalable platform that helps your software or systems development organization manage compliance with standards, policies and regulatory mandates (such as Sarbanes Oxley) - mandates that are often explicit about penalties, yet unclear about implementation and documentation requirements.
To satisfy an internal or external audit, software or systems development organizations should be able to:
"Say what you do" - establish a compliance-aware development process.
"Do what you say" - automate enforcement of your process.
"Be able to prove it" - automate the generation of audit documentation.
Many companies are developing an overall compliance architecture that is stable enough and flexible enough to help them meet new and changing regulations, while at the same time improve business performance. For these companies, implementing an enterprise-wide compliance architecture can reduce costs, increase flexibility, and reduce operational risk.
Using a scalable approach, you can start small, with focused pilot solutions that meet specific urgent needs, and expand your solution at the pace that makes sense for you. Where you should start depends on how you scope your compliance challenges.

Customers are responsible for ensuring their own compliance with the Sarbanes-Oxley Act and other laws and regulations. It is the customer's sole responsibility to obtain advice of competent legal counsel as to the identification and interpretation of any relevant laws, including but not limited to the Sarbanes-Oxley Act, which may affect the customer's business and any actions the customer may need to take to comply with such laws. IBM does not provide legal, audit or accounting advice or represent or warrant that its services or products will ensure that the customer is in compliance with any law.
|