December 2008 Fujitsu Research Institute Presentation resource Presentation Slides OCEG Reviewed
Fujitsu Research Institute's Internal Controls XBRL presentation at the XBRL International Conference.
Read more
GRC-XML Work Group: December 16, 2008 Meeting resource Guides OCEG Reviewed
The December 16, 2008 presentation on Internal Controls XBRL and Enterprise Risk XBRL from Fujitsu Research Institute
Read more
A Guide to Messaging Archiving (2008) resource White Papers OCEG Reviewed
October 6, 2008
Abstract: (Source: Google) Explore compelling reasons for the implementation of a messaging archiving system and learn the top vendors whose offerings are focused squarely on the archiving space. Should you archive your organization's email content? According to the American Management Association, 24% of companies have experienced their employees' email being subpoenaed and 15% have gone to court because of lawsuits brought on by their employees' email. The statistics don't stop here.
Read more
Role Of Technology In Establishing A Grc Program, The (2008) resource Articles OCEG Reviewed
Talk to any security vendor or expert and he or she is bound to have a view on GRC. Interestingly, all these views are divergent and inconsistent. Many view it as a technology play, while others think of it as a business process endeavor. In reality, an effective GRC strategy consists of the right blend of people, processes and technologies working together in harmony.
BTQ, Q 2008
Read more
DIRECTIVE 2006/24/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public ... (EU, 2006) resource International Materials OCEG Reviewed
DIRECTIVE 2006/24/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC
Read more
Record Retention & Data Management group
Welcome to the Record Retention & Data Management community group.
This group addresses all GRC issues that arise in the management of data. In addition, there is a community group that addresses Information Privacy and Security. You may want to check out and join that group as well.
We welcome participation in this group by any premium or enterprise OCEG member.
Read more
Record Retention & Data Management
UK, Retention of personnel and other related records (CIPD, 2008) resource Articles OCEG Reviewed
This factsheet gives introductory guidance. It provides a checklist of statutory and recommended retention periods for various classes of personnel documents is based on legal requirements and good personnel practice. The checklist below is divided into two parts:
United Kingdom Data Retention Electronic Communications Regulations 2007 resource White Papers OCEG Reviewed
This paper explores the United Kingdom Data Retention Regulations 2007 by exploring the meaning of privacy as per the Human Rights Act and the meaning of privacy in other countries.
Aligning COBIT 4.1, ITIL V3 and ISO/IEC 27002 (2008) resource White Papers OCEG Reviewed
The briefing applies generally to all IT best practices but focuses on three specific practices and standards that are becoming widely adopted around the world. It has been updated to reflect the latest versions:
• ITIL V3Published by the UK government to provide a best practice framework for IT service management
• Cobi T 4.1Published by ITGI and positioned as a high-level governance and control framework
Read more
UK, 2008 information security breaches survey: technical report (BERR, 2008) resource Research / Studies OCEG Reviewed
The main report detailing the findings of the 2008 Survey conducted on behalf of BERR by PricewaterhouseCoopers.
Read more



