Preparing Information Security for legal and regulatory compliance (Sarbanes–Oxley and Basel II)

The problem for many IT and Information Security departments is how to keep abreast of new and never-ending regulation and legislation and translate it into IT terms. This article reviews two of the more recent examples (Sarbanes–Oxley and Basel II), how compliance can be addressed in a more cost-effective fashion and how this is changing the role of Information Security.