Risk Management
Risk
Management has become increasingly important
because of Sarbanes Oxley compliance
requirements which address the security
and integrity of IT systems and controls
as well as the accuracy of financial
reporting.
Risk Management of EC and B2B systems and
processes presents special challenges
because of the interrelationship of the
trading partners - vendors, suppliers,
distributors - and the many points of
connectivity between the entities and
systems throughout the supply chain.
Systrends IT risk management methodology
includes our in-depth knowledge and
application of IT, Internet, and EDI
security; our project management experience;
and our experience with standards,
specifications, documentation, and security
policy and procedures for IT, software and
financial services. Systrends has
proven proficiency in industry accepted
standards and in using related procedures
and documents including:
 |
ANSI ASC X12 |
|
|
GS1/GDSN |
|
|
IETF EDIINT |
|
|
SEC (Securities and Exchange Commission) |
|
|
ISO/IEC 17799:2005, the international
standard Code of Practice for
Information Security Management |
|
|
Committee on Sponsoring Organizations of
the Treadway Commission (COSO) |
|
|
Control Objectives for Information and
related Technology (COBIT) |
|
|
National Institute of Standards and
Technology (NIST) |
Systrends risk assessment skill set
includes:
|
|
Technical Risk Assessment
expertise—in-depth knowledge of EC, EDI,
B2B, and Internet security. |
|
|
Business Risk Assessment
expertise—process improvement, process
documentation, project leadership, and
culture analysis and management. |
Risk Management should enhance and support
your EC and B2B systems and processes by
securing the integrity of critical
information, and protecting key logical and
physical infrastructure components.
Risk Management should be an iterative
process, with the three phases repeated
periodically to ensure that the processes in
place continue to be effective and that new
risks are identified and controlled.
These three iterative phases should be:
-
Assessment.
-
Planning.
-
Implementation and Follow-up.
|
