A discussion for DBA's, database developers, and IT management on compliance concerns, observations, issues, and solutions, based on the consulting work of John Weathington. Comments are welcomed! So please let me know what's on your mind, and we'll discuss. http://www.toadworld.com/Community/Blogs/tabid/67/BlogId/21/Default.aspx en-US John Weathington webmaster@toadworld.com Tue, 02 Dec 2008 07:55:48 GMT Tue, 02 Dec 2008 07:55:48 GMT http://backend.userland.com/rss Blog RSS Generator Version 3.2.0.15477 Control convergence – the effort of staying in compliance while reducing the number of controls – is a big trend in the industry today. In this article, we demonstrate how the data professional can support a control convergence effort, by way of fictitious case study. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/285/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/285/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=285 Fri, 03 Oct 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=285 In this article, we talk about policies – an important area of your companies governance, risk, and compliance program. We discuss what a good policy looks like, and how you can evolve a policy data management system in 3 stages. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/283/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/283/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=283 Thu, 25 Sep 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=283 Human beings, by their very nature, make mistakes. Even seasoned professionals make simple errors on occasion. In this article we explore the “mistake database”, an architecture to help your company minimize errors. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/278/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/278/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=278 Thu, 18 Sep 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=278 On this 7th anniversary of the September 11th catastrophe, we’ll take a close look at how to characterize disaster, and more importantly how to learn and move on. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/276/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/276/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=276 Thu, 11 Sep 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=276 Inaccurate risk probabilities can wreak havoc on the applicability of your risk database. Why go through the trouble of setting it up, if bad probability entries render your database unusable? In this article, we explore the importance of getting the risk probability correct, and ways to improve your accuracy. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/272/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/272/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=272 Thu, 04 Sep 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=272 Compliance usually starts with a fire drill, however intelligent companies take the time to step back and put their compliance into perspective. Risk is the key to understanding and optimizing your compliance program. In this article, we discuss risk as an evolution from compliance, and look at some ways to model it in the enterprise. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/268/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/268/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=268 Thu, 28 Aug 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=268 A consistent pattern that emerges in compliance best practices, is the notion of accountability. Demonstrating accountability is a key component of building a solid compliance program. In this article, we explore the motivation, requirement, model, and architecture to make accountability a reality in your company. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/264/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/264/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=264 Thu, 14 Aug 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=264 A death march is a project that is doomed to fail. If you are in IT, and you are dragged onto a compliance project, chances are you will find yourself stuck here. In this article, I'll give you my tips for identifying a death march, and more importantly surviving one. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/260/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/260/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=260 Thu, 07 Aug 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=260 The new SEC standards for SOX compliance have made it clear that your company should spend more time focused on financial risk. In this article, we’ll explore what’s driving this, how you as a database professional can help out, and some design considerations for a Financial Risk Compliance Data Mart. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/258/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/258/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=258 Thu, 31 Jul 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=258 This article wraps up the series on the types of controls and our discussion of architectures, by taking a look at the adaptive control. We’ll explore how you can support your business deal with the impact of risks, when there is no contingency plan. http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/255/Default.aspx John Weathington http://www.toadworld.com/Community/Blogs/tabid/67/EntryID/255/Default.aspx#Comments http://www.toadworld.com/Default.aspx?tabid=67&EntryID=255 Thu, 24 Jul 2008 07:00:00 GMT 0 http://www.toadworld.com/DesktopModules/Blog/Trackback.aspx?id=255