As a service provider, ControlOrigins was created to bridge the gap between leading practices, regulatory requirements and business processes. Our mission is to assist compliance officers and other business managers to understand how policies and procedures, when properly designed, can implement controls that directly add value to business.

From regulatory challenges to improving business processes, a common term in use today is “control”. In the past, discussions regarding controls were centered on finance, accounting and even manufacturing: now the term is frequently represented in policies and procedures and increasingly those specific to Information Technology. 

Adding to the requirement for controls are regulations including the Health Insurance Portability and Accountability Act (HIPAA), the  Graham-Leach-Bliley Act (GLBA) and now the Sarbanes-Oxley Act of 2002 (SOX). Regulatory requirements have definitely raised the awareness of controls in medium to large organizations. Business partners have also demanded the implementation of controls for their service providers including Statement on Auditing Standards No. 70 (SAS70) and Payment Card Industry (PCI) standards.

Bottom line, control is now an integral part of business, however, most organizations can not identify the origin of their controls nor the business requirements, risks and leading practices that support that control. The team from ControlOrigins can rapidly provide a gap analysis of your organization’s risks, controls and processes to assist in development of an enterprise process and control strategy.

Can you rapidly identify process risks?

Comparing a corporation's processes and controls to both regulatory requirements and best practice frameworks is a key component of evaluating risk.   The ability to analyze the maturity of an organization from a process and control perspective is essential to developing a strategy to increase that level of maturity through the introduction of new technology solutions or new process sourcing solutions. 

The process of evaluating enterprise risk should begin with creation of a clear baseline of the current process and control environment. Once defined, the baseline model is initially used to perform a "Gap Analysis" of an organization’s process and control hierarchy.

Most organizations rely on consultants, after many hours of interviews, analysis and data entry, to build complex spreadsheets that are used for process and control analysis. In order to manage risk, executives need the ability to define a clear process and control strategy for their enterprise.

The ControlOrigins model will provide just that capability. Utilizing an advanced control analysis model, the ControlOrigins team can rapidly analyze the process and control hierarchy and complete the initial gap analysis process. The analysis will be driven by risk management, leading practices and business requirements that are relevant to your organization.

ControlOrigins was created to bridge the gap between leading practices, regulatory requirements and business processes. Our mission is to assist compliance officers and other business managers to understand how policies and procedures, when properly designed, can implement controls that directly add value to business. We leverage best practices to improve business operations, reduce risk and achieve regulatory compliance.

The Sarbanes-Oxley Act of 2002 (SOX) has been a costly learning experience for corporate executives as well as accounting and consulting services firms. As guidance from the Public Company Accounting and Oversight Board (PCAOB) continues to refine the implementation expectations for process and controls, the costs continue to exceed the expectations of most executives.  

Testing the patience of corporate America, large accounting and consulting services firms continue to provide compliance services without comprehensively providing a sound enterprise process and control strategy. We believe it is our responsibility to provide corporate executives with the ability to control their destiny with fair and equitable services that result in a comprehensive system of process and control. ControlOrigins is a leading provider of control management services for businesses worldwide.

Benefits of Our Approach:

• Reduced risk 
• Reduced compliance costs 
• Increased process visibility & efficiency 
• Increased procedural adherence 

Leveraged Leading Practices

• CobiT (Information Technology Governance Institute)
• ISO177:2005 (International Organization for Standardization)
• NIST (National Institute of Standards and Technology)
• ITIL (IT Infrastructure Library)
• ® CERT /CC (Carnegie Mellon University/SEI)

Regulatory / Compliance Requirements

• SOX (Sarbanes-Oxley Act of 2002)
• HIPAA (Health Insurance Portability and Accountability Act)
• GLBA (Gramm-Leach-Bliley Act)
• PCI (Payment Card Industry)
• SAS70 (Statement on Auditing Standards No. 70)