Compliance & IT AuditOps

In the IT world, Compliance is a way to ensure the organizations meet the standards for meeting the Privacy and Data Security that apply to that specific industry in context.  Examples are, HIPAA, GDPR, PCI-DSS, SEBI, RBI etc.

Many organizations ignore to take care of these non-functional requirements in the SDLC process and start conducting Compliance Checks late in the game, resulting in revisiting of key design / architectural decisions.  In addition to this, most of the organizations perform all internal IT Audits manually using some checklists. Auditors go to the application teams asking them to provide evidence of meeting the compliance against each of the items in the checklist. This reactive approach in attempting both Compliance Checks and IT Audits go smoothly may not only delay ‘go-live’ schedules but also result in paying a huge fines and penalties.