Home About Us Services and Solutions Careers Investors Contact Us Site Map


  Today is:
Compliance Home
Compliance Solution Offerings
Compliance Drivers by Sector
Online Benchmark Tool
View Personal Benchmark
Compliance Downloads



En technologies Compliance Solution Offerings Aligned To Best Practice

A structured approach aligned to best practices provides the foundation of improved efficiency and lower risk. The formal documentation resulting from this approach allows all parties to understand how the corporation’s compliance policy is being implemented and maintained. Therefore, the entech Compliance Practice team has established a series of offerings designed to meet the precise needs of the customer based on the current stage of their IT compliance implementation.

Offering #1: IT Gap Analysis and Risk Assessment
The IT Gap Analysis and Risk Assessment, as provided by entech, uses the ITGI recommended approach, which covers a company-level assessment of an organization’s IT control environment. The goal of this analysis is to offer support to those professionals responsible for corporate IT systems in the following areas:

A. Assessing the current state of the IT systems, software and control environment
B. Designing/improving systems and controls necessary to meet the directives of Sarbanes-Oxley section 404
C. Recommendations for closing the gap between A and B

Included in this Offering is the identification of key accounts and controls, as well as an analysis of the five domains of Information Technology General Controls (ITGC).

1. IT control environment
2. Program development
3. Program changes
4. Computer operations
5. Access to programs and data

Since most public companies have not yet documented their IT controls to the extent required by SOX 404, entech will deliver initial documentation of all IT Controls aligned to the ITGI recommendations.

Offering #2: IT Solution Recommendations
Evaluation of control design and operational effectiveness leads to the foundation for the next stage, which is proposing the remediation recommendations to close gaps uncovered in the IT Gap Analysis and Risk Assessment.

Offering #3: IT Systems Upgrade and Remediation Statement of Work
This engagement is typically scoped to address all SOX remediation requirements as defined in Offerings 1, 2 and 3. This effort includes design, architecture, development and deployment of recommended software, hardware and all integration services. This offering is presented as a formal Statement of Work (SOW), which delineates subtasks and timelines for the entire project. As a Premier IBM Business Partner, entech is uniquely positioned to offer the complete array of software, development, integration, testing and support services that may be required.

Offering #4: Sustained Compliance Managed Service
Sustaining compliance is critical as IT Governance and SOX are ongoing requirements (not to mention that the regulatory landscape continues to change over time). entech provides quarterly managed service to support management and auditors in their mandatory attestation process. This offering provides for quarterly IT system reviews with recommendations relative to new compliance requirements and/or new remediation requirements aligned with ITGI.

Summary of entech Compliance Solution Offerings

Compliance Stage Solution Offering
1 Plan & Scope Policy and scope defined by customer with auditors
2 Perform IT Risk Assessment Offering #1: IT Gap Analysis and Risk Assessment
3 Identify Significant Accounts/Controls Included in Offering #1
4 Document Control Design Included in Offering #1
5 Evaluate Control Design Offering #2: IT Solution Recommendations
6 Evaluate Operational Effectiveness Included in Offering #3
7 Identify & Remediate Deficiencies Offering #3: IT Systems Upgrade and Remediation Work
8 Document Process & Results Included in Offering #4
9 Build Sustainability Offering #4: Sustained Compliance Managed Service


home   about us   services & solutions   news   careers   investors   contact us   sitemap   

Copyright © 2006 en technologies corporation