Connect with us

Business

IDENTITY SECURITY IN THE ERA OF SOX

Source: Finance Derivative

By Steve Bradford, Senior Vice President, EMEA, SailPoint

The Sarbanes-Oxley Act (SOX) is a federal law that mandates practices in auditing and financial regulations for public companies. Its original intent being to restore trust in a corporate and financial system that had been rocked by major accounting scandals such as Enron, WorldCon and Tyco. Legislators believed if there was no trust in the major corporate institutions of America, then the whole fabric of capitalism could be brought into question.

Initially only applying to American companies, every major institution that dealt with America had to comply with SOX. It was a huge a success with the number of financial scandals emanating from the US dropping dramatically since compliance. But can The UK follow suit?

Preparing for “SOX UK”

The UK has had its own high profile business collapses – notably BHS and Carillion. So, the government has launched a consultation programme that mimics the US SOX rules. The consultation on reforms aims to ‘restore trust in audit and corporate governance’ and applies to auditors, companies, directors, audit committees, investors, other stakeholders, and the regulator.

A focus is on companies with a significant public interest, otherwise known as Public Interest Entities (PIEs). These include financial institutions, banks, insurance companies, underwriters, and alike – many of which are already familiar with a high degree of financial scrutiny. A noteworthy difference is the stated preference to expand the UK SOX controls beyond public interest companies, which could include large companies in retail, manufacturing, logistics and automotive.

UK SOX may seem like a massive undertaking if unfamiliar, but with the right technologies in place manual tasks can become automated, reducing time which can be then redirected to greater priorities or risks, and everyday operations will be guided by a strong set of well-defined controls.

A growing threat

The Sarbanes-Oxley Compliance 9-Step checklist provides a series of recommendations to protect the validity of all reported information and help businesses to ensure they are following the rules. This includes the need to establish controls to prevent data tampering, track data access, test the effectiveness of safeguards and detect security breaches – any of which need to be reported to SOX auditors on time.

As both physical and digital information are affected, accurate management is an integral part of compliance. Remote working, blockchain integration, and the emergence of cloud-based banking (Banking as a Service) have led to growing cyber threats, privacy concerns and compliance requirements through the complexities of connectivity.  For example,  multiple devices now connect to networks from different locations, accessing the vast amount of information in the cloud. There is now critical need to close security gaps outside the perimeter.

Some of the greatest threats lie within an organisation – either human error or more likely, the rise in risk facing the access today’s workforce has to technology. Complex corporate structures and departmental silos hinder management’s visibility into workforce roles, responsibilities, and data access. Traditional reliance on spreadsheets and manual processes for tracking data access and user identities leads to inaccuracies and inconsistencies.

Apart from being an auditing and reporting nightmare, the situation creates system gaps that are ripe for exploitation by threat actors.

Maintaining security through identity

To meet security and compliance regulations, companies and organisations must act smarter in how they protect their “perimeter”, which is centred on its people – the new threat vector of choice. Companies must prepare to automate business processes and embrace new security practices that fully protect the workforce and the tools they need to  do their job.

Staying in compliance with regulation is important for the safety of the company, but it is crucial that the right safety measures are in place. Identity access management can reduce the risk of insider threat, data breaches and human error for financial reporting – enabling automated logging and report generation for companies to make smart decisions whilst uncovering and remediating hidden or unknown issues that pose inherent risk.

The countdown to SOX

One commodity companies don’t have is an abundance of time. With less than 18 months to go until the SOX recommendations deadline, any form of automated access system is an essential first step in ensuring companies are prepared. Starting early is critical – given an implementation programme can take 18-24 months for a company that is used to stringent financial regulations. It’s time to get identity and access compliance right – automation can save a significant amount of effort and money, whilst improving the accuracy of identity management processes.

As seen in the US, UK companies not used to financial compliance procedures will have to catch up or ask for help – learning from the financial sector – and scale up their auditing and control to comply with more stringent regulations. The rules are there to help provide the security that regulators need for a secure commercial environment. Now is the time to act in order to reduce the risk.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Auto

Could electric vehicles be the answer to energy flexibility?

Rolf Bienert, Managing and Technical Director, OpenADR Alliance

Last year, what was the Department for Business, Energy & Industrial Strategy and Ofgem published its Electric Vehicle Smart Charging Action plans to unlock the power of electric vehicle (EV) charging. Owners would have the opportunity to charge their vehicles while powering their homes with excess electricity stored in their car.

Known as vehicle to grid (V2G) or vehicle to everything (V2X), it is the communication between a vehicle and another entity. This could be the transfer of electricity stored in an EV to the home, the grid, or to other destinations. V2X requires bi-directional energy flow from the charger to the vehicle and bi- or unidirectional flow from the charger to the destination, depending on how it is being used.

While there are V2X pilots already out there, it’s considered an emerging technology. The Government is backing it with its V2X Innovation Programme with the aim of addressing barriers to enabling energy flexibility from EV charging. Phase 1 will support development of V2X bi-directional charging prototype hardware, software or business models, while phase 2 will support small scale V2X demonstrations.

The programme is part of the Flexibility Innovation Programme which looks to enable large-scale widespread electricity system flexibility through smart, flexible, secure, and accessible technologies – and will fund innovation across a range of key smart energy applications.

As part of the initiative, the Government will also fund Demand Side Response (DSR) projects activated through both the Innovation Programme and its Interoperable Demand Side Response Programme (IDSR) designed to support innovation and design of IDSR systems. DSR and energy flexibility is becoming increasingly important as demand for energy grows.

The EV potential

EVs offer a potential energy resource, especially at peak times when the electricity grid is under pressure. Designed to power cars weighing two tonnes or more, EV batteries are large, especially when compared to other potential energy resources.

While a typical solar system for the home is around 10kWh, electric car batteries range from 30kWh or more. A Jaguar i-Pace is 85kWh while the Tesla model S has a 100kWh battery, which offers a much larger resource. This means that a fully powered EV could support an average home for several days.

But to make this a reality the technology needs to be in place first to ensure there is a stable, reliable and secure supply of power. Most EV charging systems are already connected via apps and control platforms with pre-set systems, so easy to access and easy to use. But, owners will need to factor in possible additional hardware costs, including invertors for charging and discharging the power.

The vehicle owner must also have control over what they want to do. For example, how much of the charge from the car battery they want to make available to the grid and how much they want to leave in the vehicle.

The concept of bi-directional charging means that vehicles need to be designed with bi-directional power flow in mind and Electric Vehicle Supply Equipment will have to be upgraded as Electric Vehicle Power Exchange Equipment (EVPE).

Critical success factors

Open standards will be also critical to the success of this opportunity, and to ensure the charging infrastructure for V2X and V2G use cases is fit for purpose.

There are also lifecycle implications for the battery that need to be addressed as bi-directional charging can lead to degradation and shortening of battery life. Typically EVs are sold with an eight-year battery life, but this depends on the model, so drivers might be reluctant to add extra wear and tear, or pay for new batteries before time.

There is also the question of power quality. With more and more high-powered invertors pushing power into the grid, it could lead to questions about power quality that is not up to standard, and that may require periodic grid code adjustments.

But before this becomes reality, it has to be something that EV owners want. The industry is looking to educate users about the benefits and opportunities of V2X, but is it enough? We need a unified message, from automotive companies and OEMs, to government, and a concerted effort to promote new smart energy initiatives.

While plans are not yet agreed with regards to a ban on the sale on new petrol and diesel vehicles, figures from the IEA show that by 2035, one in four vehicles on the road will be electric. So, it’s time to raise awareness the opportunities of these programs.

With trials already happening in the UK, US, and other markets, I’m optimistic that it could become a disruptor market for this technology.

Continue Reading

Business

Adapt or fall behind: why embracing data-centric technology is key for investment firms

Source: Finance Derivative

By Murray Campbell, Product Manager at AutoRek

The investment sector has often relied on conventional procedures and stringent regulations. However, coping with obsolete legacy software can impede an organisation’s growth and development. Despite being aware of these challenges, investment companies worldwide tend to persist with these systems due to the perceived high cost and complexity in implementing modern technology. 

As technology continues to advance and the world becomes more digitally dependent, there is increasing pressure on firms to ensure their buy-side operating model is as efficient as possible. While investment firms have typically prioritised the front-end of their product, the back-office is equally important as this is the engine that drives any organisation. This is particularly key in today’s rapidly evolving markets where significant rewards await businesses that can successfully deliver innovation and efficiency within their organisation.

The unforeseen costs of manual processes

When investment firms operate independently, they often end up utilising various platforms that offer similar functions. However, this approach results in the accumulation of expensive and disjointed systems, leading to inefficient workflows, high costs, and the need to maintain multiple vendor relationships. Such inefficiencies can hinder a firm’s ability to adapt to new market challenges and demands, which can be a major problem for companies in the long-term.

For many, the lack of suitable IT systems is the most common operational challenge UK investment businesses face. Many face obstacles when it comes to reliance on manual processes, an absence of suitable solutions available in the market, or a lack of resources available to invest in such solutions. In the dynamic realm of data management, the choice of tools and solutions is crucial for steering business decision-making and operational efficiency. Investors need faster, more personalised customer experiences and investment firms need to focus on providing seamless journeys – even in the face of economic turbulence and increasing regulatory requirements.

One area where organisations can greatly benefit from advanced technology is by reducing their dependency on spreadsheets. Currently, many buy-side investment managers are still reconciling data in spreadsheets or using generic platforms that lack key features. In fact, more than nine in 10 agree that their firm relies too heavily on manual tasks and spreadsheets, meaning that the UK investment management industry still has some distance to go to remove reliance on manual reconciliations. Relying on outdated methods can be a costly mistake.

The expansion of the digital economy, increasing transactional volumes, and ever-changing regulatory obligations have made it necessary to adopt more sophisticated solutions. Excel, for instance, lacks key controls and has limited auditability, making it almost impossible to track and evidence actions. As a result, organisations end up spending more resources and money to fix errors, leading to higher costs in the long run. Therefore, transitioning to more advanced solutions is crucial to ensure data accuracy, integrity, and scalability as they continue to grow and evolve.

How is automation changing the investment industry?

In the current digital age, management of complex operations is heavily reliant on automation. With the help of data-driven insights, automation can enable investment managers to make informed decisions, identify market trends, and optimise portfolio performance. By automating tasks such as validations and cash transfers, investment managers can ensure that data-related tasks are executed with speed and accuracy, freeing up their time to focus on activities where their human expertise and creativity can add more value.

According to a recent report by AutoRek, UK-based investment managers claim they are continuing to invest in automation, with 100% of respondents either maintaining or increasing their automation expenditure in the years ahead. Continued investment in automation is promising given firms remain too reliant on manual processes, particularly when it comes to reconciliations. Nevertheless, successful implementation isn’t about adopting every automation tool available. Instead, companies should focus on strategically selecting applications and carefully refining processes that are in line with their corporate objectives and unique requirements.

Act now or fall behind

The promise of emerging technologies lies in the ability to unlock new insights and improve productivity. But to use this technology effectively, modern infrastructure that can capture and validate large volumes of data in a scalable manner is required. Replacing manual processes with end-to-end automation can drive significant benefits for investment firms as it presents an opportunity to eliminate much of the friction around reconciliations, reduce operating costs, and liberate staff from repetitive manual tasks.

To conclude, the integration of data-centric technology is crucial. If investment firms want to remain competitive and innovative they must keep up with the demands of fast-moving markets. They must clear their data clutter and evolve quickly – or risk being left behind.

Continue Reading

Business

Why email marketing remains one of the best forms of digital marketing

Crafting a strong email marketing strategy involves a real balance between creativity and making data-driven decisions, which, is just one of the roles undertaken by marketing and data company Go Live Data on behalf of its many clients.

Guiding some of the biggest corporates in the UK including Amazon Business, AxA and Premierline Business Insurance, Adam Herbert, CEO of Go Live Data, advises on the key components to a successful email campaign and why as one of the most effective marketing tools available, email still plays a crucial role in digital marketing:

Forming a direct means of communication, emails provides a and two-way access between businesses and their customers. And it may sound obvious to say, but unlike social media or other digital channels, every email allows marketers to reach their audience straight into their inbox, and this is where individuals are most likely to engage with the content they’re being shown.

Offering a high return on investment,  emails consistently deliver one of the highest ROI’s compared to other forms of digital marketing such as PPC and advertising. According to studies, the average is around £40 for every £1 spent, which is huge; and due to the low cost of email, its ability to drive conversions and to retain customers.

What’s more, with email segmentation and many personalisation techniques available, marketers can tailor their messages to specific groups of their audience, based on demographics, their behaviours, interests, and purchase history making them not only very targeted, but personalised too. The key is to deliver relevant content to subscribers, which means marketers can increase engagement, conversions, as well as customer satisfaction.

There are specific platforms which allow for automation, giving marketers the ability to set up automated workflows triggered by user actions and also means that marketers can deliver timely and relevant messages at scale, by nurturing leads, as an effective way to guide customers efficiently through the sales funnel.

Emails are also an excellent way to build customer relationships, by nurturing over time. By consistently delivering valuable content, exclusive offers, and personalised recommendations, businesses can strengthen the ‘bond’ with their audiences and increase brand loyalty. Email provides a means of two-way communication, which allows customers to send in their feedback, to ask any questions they may have and to  engage with a brand directly.

They are also a great way to drive traffic to your website, blog and social media, or any other digital channels connected to your business. By including attractive or compelling calls-to-action (CTAs) and relevant content, you can encourage subscribers to take action such as making a purchase, signing up for a webinar, or downloading a resource, which in turn will drive conversions and revenue for your business.

Email platforms offer substantial analytics and reporting functions that enable marketers to track the performance of their campaigns in real-time. Monitoring of key metrics such as open rates, click-through rates, conversion rates, and revenue generated, allows marketers to measure the effectiveness of their campaigns and of course make data-driven decisions to optimise and plan future activities.

Overall, emails are an integral component of a digital marketing and by leveraging email effectively, businesses can engage their audience, nurture leads, drive sales, and ultimately grow their businesses.

Continue Reading

Copyright © 2021 Futures Parity.