Control Origins was founded on a unique approach to building a logical relationship between an organization’s policies, procedures, standards, roles and skills to industry best practices (COSO, Cobit, ISO and ITIL) as well as regulatory requirements (SOX, HIPAA, Basel II, SSAE 16, PCI, CISP etc.). Additionally, industry specific regulations can be significant.
For example, energy companies are subject to a wide variety of regulatory requirements ranging from environmental related (EPA, CAA, CWA, RCRA, OPA, CERCA etc.) to financial accounting related (US GAAP, IFRS etc.). The relationship between these different disciplines is complex and multi-dimensional. Often, the relationship is managed in separate, cumbersome and complex spreadsheets or a software tool that is limited in the ability to cross reference these hierarchies effectively. These complex data relationships are well suited for a relational repository approach that is delivered through a multi-tenant, cloud based service model.
In addition to managing these complex relationships, corporate executives must also deal with the fact that new versions of each of these components are released on a daunting frequency. The landscape across these disciplines is constantly changing and when an organization designs business processes effectively, continuous improvement is the goal.
Bottom Line: Control Origins can provide clients with a common repository where these very distinct and complex models can be unified and remain relevant for data analytics and reporting.
© 2018, Control Origins, LLC.