![]() ![]() "…for the last thirteen years… | Managing Compliance Requirements The number of new laws, regulations and amendments that effect how you operate your business or agency is increasing dramatically. In fact, there were only a few in existence in the 80's, about five in 90's and approximately fifteen since then. And this does not include the 20-plus states that have enacted a law similar to California Senate Bill 1386, regarding disclosure of a breach of sensitive information in a database. Some of these compliance requirements apply to access control, some apply to protection of data and many simply represent sound security practices applied to your organization. Ollivier Corporation is particularly prepared to assist you in forming a pragmatic, common-sense approach to compliance, especially if you are subject to mulitple standards. Ollivier Corporation can help you with the following:
- ISO 17799 and 2100 These security frameworks provide the foundation of any security program and create teh basis of any assertions regarding "reasonable care," "best practices" and "standard of care." 2100 is the newest one of the two and is more process oriented. Remember, security is a process, not a state. 2100 helps proceduralize that fact. - FISMA This is the Federal Information Systems Management Act and defines for the government agencies the security requirements they are each required to meet. - HIPAA This is both a privacy and security act. It does for healthcare what FISMA does for government agencies. - GLBA The definition of financial instituions has expanded and there are many more of them now, such as mortgage companies and even many ecommerce companies. The Gramm Leach Bliley Act does for financial instistions what HIPAA does for healthcare and FISMA does for government agencies. - Rule 26 Amendment This changes forever the way the electronically stored information is subject to discovery in litigation. This Amendment recently became effective. Every business or organization, in today's world, is well advised to have a document retention and destruction plan that contemplates this Amendment. - Industry Standards Many industries have created their own standards, although a closer inspection often reveals thy are relying on FISMA or ISO 17799 as their foundation. We have found this to be true for such industries as Food and Drug, Consumer, Airline and to a lesser extent healthcare. Many organizations are overwhelmed when they learn about the existence of so many laws, regulations and rules. They often believe they need to address each and every one when, in fact, there is tremendous overlap. Ollivier Corporation can help your organization implement a straightforward and pragmatic approach to managing compliance regulations. Ollivier Corporation has 20 years of experience with access control and surveillance systems. We also have experience and expertise to help you protect your organization's most valuable assets. We invite you to let us be your trusted security advisor. |

