You are currently viewing the ‘Compliance’ Topic

Guide to Email Management

Thursday, September 25th, 2008

"E-mail is the digital formalin of the 21st century" - Lance Michalson [Formalin n. a colourless solution of formaldehyde in water used as a preservative for biological specimens etc." - OED 9th ed.] Background Email has become the life-blood of most companies.  It has replaced paper based and verbal communications as the single ...

The government’s attitude to internet issues

Wednesday, August 13th, 2008

How can the government's attitude and approach to internet issues best be described? During both the pre and post-apartheid periods, the South African government embarked on a mission to formulate information and communications technology policies. There have been multiple ICT related policies and legislation since the 1994 democratic elections.  The end ...

Corporate Governance and IT in South Africa

Saturday, November 3rd, 2007

What is corporate governance? There are many definitions of corporate governance. Simply put, corporate governance is doing what is right, decent, honest and proper in order to hold a balance between, on the one hand, economic and social goals and, on the other hand between the goals of individuals and the ...

Email Archiving Compliance

Wednesday, October 3rd, 2007

E-mail archiving compliance is not solved by technology alone.  It merges information technology issues, legal issues, business issues and records management issues that can briefly be summarised as follows:[private] Information technology issues: The use of technology solutions to help manage e-mail; Legal issues: Understanding which laws impact on the way that information ...

Current Email Archiving Best Practices

Sunday, September 30th, 2007

The current best practices include: SANS 15489 (the South African Records Management Standard):  This standard on recordkeeping provides guidance on "[t]he standardization of records management policies and procedures," and is designed to ensure "that appropriate attention and protection is given to all records ...". SABS ISO/IEC17799 (edition one), "Information technology - Code ...

Measuring Compliance

Saturday, June 9th, 2007

One of the most difficult issues with compliance is precisely how to measure it as the determination is very subjective. There are different types of compliance. For us, compliance itself is not necessarily a simple concept - compliance or non-compliance.  Rather, it is important to differentiate between different types of compliance or ...

Information Security Policies support Compliance

Tuesday, June 5th, 2007

Information Security policies support compliance in many ways. Vicarious liability Beyond sensitising employees to the risks posed by technology, information security policies minimise the organisation's exposure to vicarious liability for unauthorised or unlawful acts carried out by employees during the course and scope of their employment. As a general rule an employer is ...

Compliance - a risk management or best practice approach?

Monday, June 4th, 2007

Few topics in IT have garnered more attention during the last few years than compliance. Through a combination of new laws (particularly the ECT Act), well publicised fines overseas and the threat of criminal penalties - as well as the fear, uncertainty and doubt created by vendors - compliance ...

ICT regulatory compliance in South Africa

Saturday, August 27th, 2005

This presentation covers some compliance issues, also looking at the hype cycle. The presentation also summarizes management of critical databases, privacy, monitoring and compliance and risk cocktail. "Snapshot of current ICT Regulatory Compliance in South Africa" Note: Please click the play button on the presentation below to play the presentation Ict Compliance @ ...

ICT Compliance

Monday, September 27th, 2004

This presentation deals with compliance. Terms such as the "nature of the beast" and "fear factor" are introduced and the presentation also looks at compliance vs risk management vs best practice in relation to information security, and finally "The Electronic Communications and Transactions Act 2002" and quotes from King II. ...