CH3 Implementation Strategies for Fulfilling and Maintaining IT Compliance

Simple is better. Indeed it is when you’re trying to sort through the IT compliance maze and gain control of your information security program. In fact, the complexity of your information systems environment is a key factor in determining how successful you’re going to be with your compliance initiatives and the amount of information risk your business faces. Furthermore, simple network or not, if you don’t have some semblance of control and visibility, compliance will be a continual uphill battle—that is, an energy drain and money pit. Simplifying your network, applications, and overall IT environment wherever possible and using the proper tools to ensure things are kept in check are essential to maintaining compliance.
This chapter includes the following informative topics:

• Side Effects of Overly-Complicated Network Environments
• Simplifying Processes Where Possible
• Using Technology to Automate