XML Feed

Sarbanes Oxley Compliance

Sarbanes Oxley News

06/28/2009
IT Salaries Fall According to Janco

Janco released its 2009 Mid Year IT Salary Survey which shows that overall pay has declined for IT Professionals in the past 18 months. Janco also found that demand is down for IT Professionals.  The CEO of Janco, Victor Janulaitis stated, "The current economic climate with its cost cutting mindsets, business closures, and extensive outsourcing has put such great pressure on the IT job market that overall pay has been impacted.  Added to that many 'baby-boomers' who had planned on retiring in the next few years are not leaving the job market and you have more potential employees than positions available."

IT Salaries

Janco has captured IT compensation statistics since 1996 and publishes its IT Salary Survey semiannually. The IT Salary Survey is based on Janco Associates, Inc. IT Professionals compensation database.  Compensation benchmark hiring and salary ranges are established for each position surveyed. In analyzing the study data, the upper and lower quartiles are eliminated to determine benchmark ranges. The benchmark ranges are then used to assess the alignment of a company's actual compensation to the marketplace for each job function. A summary of the most recent salary survey can be downloaded by visiting Janco IT Salary Survey at http://www.e-janco.com/Salary.htm.


more info
 

06/20/2009
Cutbacks Impact Fringe Benefits for IT

Fringe Benefits Fall for IT Professionals

In preliminary results for the Janco 2009 Mid Year Salary Survey, Janco has found that fringe benefits like insurance, 401Ks, flexible hours, bonuses and stock options are being reduced by enterprises as they struggle to contain costs.  Janco has tracked this trend for several quarters.  The CEO of Janco, Victor Janulaitis said, "Over the first two quarters there has been a noticeable reduction in costs associated with employees.  Companies of all sizes freezing salaries, laying-off staff, making employees pay a larger portion of their insurance cost, decreasing bonuses, and cutting other benefits."

The 2009 Mid Year IT Salary Survey will be released at the end of June and more information can be gotten at JancoÂ’s websites.


more info
 

06/04/2009
Change Management Issue for Measuring IT Success

change management(HP) A significant number of service disruptions are due to poor change processes including flawed impact assessment. The cost to the business of these self inflicted wounds is high. Poorly managed change results in many negative outcomes including:

  • poor quality of service
  • dissatisfied business customers
  • unnecessary rework
  • missed deadlines
  • higher operating costs
  • poor employee morale and infighting
  • downtime of business critical services

It is no surprise to anyone associated with IT management that along with the increase in the rate and complexity of change has come a corresponding increase in the interest associated with using a best practice approach to change management. ITIL v3 says that changes should be managed to:

  • Optimize risk exposure (supporting the risk profile required by the business)
  • Minimize the severity of any impact and disruption
  • Be successful at the first attempt
    While many

firms are investing in change management as a best practice, doing it well remains difficult. There are many hurdles that must be overcome to implement a change management process that not only follows a best practice approach but also yields outstanding results. The challenge becomes obvious when you consider that many changes within a large enterprise span multiple geographies, involve multiple teams and organizational units and include infrastructure elements that cross multiple domains—network, servers, storage, and applications.


more info
 

06/01/2009
Where to Start with Security

Security Policies & ProceduresThe keys to sound security are often considered deployment of a sensible security risk analysis approach, compliance with a recognized standard such as ISO17799 or ISO27000 or BS7799, development of comprehensive information security policies and deployment of a detailed security audit program.

But where to start? The answer is easy -  Janco Security Policies and Procedures Template and the Janco Audit Security Program.  Risk analysis is often presented in a confusing and over-complicated manner, ISO 17799 or ISO27000 or BS7799 compliance can seem a daunting task, security policies can be totally ignored in practice, and security audit is sometimes less effective than it should be due to over-stretching of busy audit professionals.

http://www.e-janco.com/SecurityAudit.html is intended to provide a launch pad to help alleviate these difficulties. Janco has an approach that works.

Whether you need a security risk analysis method/product, guidance on how to achieve compliance with ISO 17799, ISO27000, BS7799 or your own IT security policies, or whether you simply wish to increase the productivity of your security audit team, the resources at Janco should help.

The IT Security Manual Template provides all the essential sections of a complete security manual and walks you through the creation of each step. Detailed language addressing more than a dozen security topics is included in a 220 plus page Microsoft Word document, which you can modify as much or as little as you need to fit your business requirements.


more info
 

Sarbanes Oxley Resource
Compliance Kit

The SOX kit contains all of the tools that are need to comply with the Sarbanes-Oxley legislation.  This tool kit has been used successfully by over 500 publicly traded companies.

 

Sarbanes-Oxley Section 404 requires that:

  • Enterprises have an enterprise wide security policy;

  • Enterprises have enterprise wide classification of data for security, risk, and business impact;

  • Enterprises have security related standards and procedures;

  • Enterprises have formal security based documentation, auditing, and testing in place;

  • Enterprise enforce separation of duties; and

  • Enterprises have policies and procedures in place for Change Management, Help Desk, Service Requests, and changes to applications, policies, and procedures.

To meet these needs the Sarbanes Oxley Kit, which comes in four editions (Standard, Silver, Gold, and Platinum) contains:

  • Security Policies (all editions);

  • Threat & Vulnerability Assessment Tool (all editions);

  • Business & IT Impact Questionnaire Risk Assessment Tool (all editions);

  • Safety Program Template (all editions);

  • Disaster Recovery Template (all editions);

  • Outsourcing guide update to reflect what you vendors need to do (all editions);

  • Software tool to monitor key data files (all editions);

  • Internet and IT Job Descriptions (Silver, Gold, and Platinum Editions) and;

  • IT Service Management Template (Platinum Edition).

Site Map

Disaster Recovery Plan TemplateIT Job Descriptions

© 1999 - 2009 Janco Associates, Inc. - ALL RIGHTS RESERVED  --  Revised: 06/16/09.