Publicly Traded Companies are under greater regulation requirements than privately held companies with respect to the security of their IT Data.  Intersec Worldwide can help you determine which security regulations apply to you and how to meet those security requirements.

Compliance For Public Companies

Sarbanes-Oxley Readiness (SOX404)

Intersec Worldwide can ensure your company's compliance with the Sarbanes-Oxley IT Audit requirements. Our consultants are the best in the industry, bringing together years of experience. The Sarbanes-Oxley Act (SOX) restructures processes and accountability for financial reporting in U.S. public companies. Corporate management must establish, evaluate and monitor the effectiveness of their internal controls over financial and operational processes, every year.

According to Section 404 of the U.S Sarbanes-Oxley Act of 2002 publicly traded companies are required to provide an annual attestation of their financial reporting internal controls. These controls can be performed by management or independent auditors. This section of the act pertains to the misstatement of financial data but the security aspect is that you can not guarantee the accuracy of the information if you can not control who has access to it.  Intersec Worldwide is able to assist you in securing access to this data and maintain your compliance with Section 404.

IT General Controls Review

The General Controls Review is essentially an information technology audit. IT General Controls are the fundamental controls that apply to all applications, processes and data of an organization. The Review is to ensure the proper development, implementation and maintenance of applications and to assess the security of the data. The experienced consultants at Intersec Worldwide will guide you through all aspects of the review to assess the integrity of your systems and help you develop a policy to maintain them.

SAS70 Reports

SAS 70 (Statement on Auditing Standard 70) Report is a "Report on the Processing of Transactions by Service Organizations".  The SAS 70 is a professional standard set up for a service auditor that audits and assesses internal controls of a service organization. At the end of the audit, the service auditor issues an important report called the "Service Auditor's Report".  Intersec Worldwide can perform this service for you and prepare your Audit Report.

There are two types of SAS 70 Reports:

1. SAS 70 Type 1 audit report is an audit that describes the situation on a specific date.  Analogous to the way a balance sheet depicts a company’s financial condition on a specific date.
2. SAS 70 Type II audit report is a report that will test the operating effectiveness of those controls over a time period, traditionally six (6) months. Analogous to the way an income statement depicts a company’s financial condition over a period of time.  This audit fills the requirements for Sarbanes Oxley compliance.

Compliance Services Intersec Worldwide Offers

In order to help you comply with your Industry required security regulations Intersec Worldwide is here to help you with each of the following functions.

• Policy Development
• Risk Assessment
• Penetration Testing
• Vulnerability Scanning