Re: Standards Compliance Software or Guidlines?

We wrestled with the issue of how to assess Sarbanes Oxley. ISO17799 (for us) 
was just a method to help meet our obligations under SOX and HIPAA.

Some of the best audit guides I'm aware of are online at www.isaca.org, which 
is the home site for CoBiT. I've not tried any of the software packages, since 
what I did was to figure out how the different standards could be used to map a 
cogent overall Infosec policy. Not sure that the end result necessarily 
measured up to that, but I did a fair amount of work analyzing CoBit, ISO17799 
(2000 and 2002).

I know that doesn't hit the answer square on the head, but I'm not sure such a 
comprehensive piece of software exists. 



On Oct 25, 2004 09:51 PM, Andre Derek Protas <randori82@hotmail.com> wrote:

> Iâm trying to find some good resources out there for some good compliance
> software or guidelines for the following audits:
>
> Sarbanes-Oxley
>
> FFIEC
>
> HIPAA
>
> ISO 17799
>
>  
>
> Anyone have any good suggestions?  Every website Iâve come across from
> googling is wanting money, and itâs nearly impossible to just get some good
> information on any of them with relation to an IT audit.
>
>  
>
> Thank you in advance,
>
>  
>
> Andre Derek Protas
>
>  
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
>