For most organizations, the annual compliance audit is like a root canal. But your compliance audits can be straightforward—and even be pleasant—if you’ve got a good relationship with your assessor and have your act together. The easier it is for your compliance assessor to do their work, the more your audit will be no big […]
Ever think about the first guy to buy a nail gun? Maybe he was happily pounding on the frame of a house with his trusty hammer. Some salesman walks up to him and offers to sell him a nail gun. It’s a big, ten-pound monster that has to be plugged into an outlet. The carpenter’s […]
A year ago, your company became compliant for the first time. It was cause for celebration, slaps on the back, and a free lunch for your internal compliance team. You worked hard and nearly killed yourselves to get there, but you did it. Now it’s a year later, and you’re sitting across from your assessor. […]
You got into IT expecting to research new technologies and use them to do cool stuff. You wanted to move your company forward with digital innovations, to wield your creative energies and make a difference in your organization. But when it comes to managing security and compliance, it’s like you’re stuck in the Stone Age. […]
As your company’s chief risk officer, you’re the five-star general responsible for protecting your company. Those compliance standards you have to deal with every year may be a pain in the butt, but they’re part of your arsenal. Keep them sharp and you’ll fight a good fight. Compliance standards can be unwieldy, and hard to […]
Know what the definition of insanity is? It’s constantly doing the same thing and expecting a different result. I’d like to suggest another definition: it’s insane to do the same thing over and over, when you don’t need to do it! Most of my clients have multiple standards to comply with, and most of those […]
With Stone Age technology, everything takes a lot more time and a lot more effort. Traveling to the next town takes all day. Grilling a burger starts with hunting the buffalo. And running a compliance effort means investing hundreds of man-hours and tens of thousands of dollars into a frustrating process. If you’re using a […]
What if I told you that you could recover hundreds of man-hours on your compliance efforts, just from status updates alone? Seriously. Years ago, I was stuck in the Stone Age of compliance, before TCT Portal. I was helping a client become compliant, and we only had rudimentary tools available to us. We tracked the […]
If you’re becoming compliant for a certification like PCI, HIPAA, NIST, SOC or ISO, you have hundreds—maybe thousands—of line-item elements to take care of. One of the initial challenges is simply knowing which team members own what items. Most organizations use some type of manual process to assign each line item, one by one. It’s […]