The act of complying with Regulations, Standards and Frameworks is becoming essential business practice. The IDL Compliance Program identifies the compliance issues that are generating compulsory and compelling IT investment across a variety of industry sectors.

Please select a different Industry sector from the menu below:

Insurance Banking Retail Supply Chain Public Sector
Healthcare Pharmaceuticals Automotive Supply Chain Telco

Issue Brief New Policy Driver IT Investment Implications Compliance Timetable
EU Data Protection Directive – 95/46/EC This directive covers the use of data held on private individuals within the EU. It mandates that data must be handled fairly and openly, limited to the purpose for which it was gathered, stored securely and limited in its distribution. Individuals have rights to access and redress for any inaccuracies.

This act is augmented by two other acts specific to the telecommunications and electronic communications sectors which look at the automatic gathering of data and its uses.

US companies can comply through the US “Safe Harbor” scheme.
Security
Database
Content Management
Storage
Backup
Disaster Recovery
CRM Systems
Document Management
Operational
Operating and IT solutions emerging.
EU Working Time Directive EU legislation designed to prevent damage to the health of workers through working excessive hours. Effects all companies of all sizes, requires various collection of data. Data Storage
Data Management
CRM
Various Applications
Operational
In operation and IT systems in procurement, usually adapting ERP HR system.
EU Audit Directive A new Directive on statutory audit in the EU. Objectives are to ensure that investors and other interested parties can rely fully on the accuracy of audited accounts and to enhance the EU's protection against the type of scandals that recently occurred in companies such as Parmalat and Ahold. Information lifecycle management (ILM)
Storage
Archive
Disaster Recovery
Email Management
Email Content Audit
Database
Data Mining Tools
Risk Assessment and Management Tools
Point Solutions
Deadline
Review under way.
EU Electronic Data Directive Requires Member states to allow filing of company records electronically. Additionally requires certain company particulars (e.g. registered address, registration number) to be all company documents, including electronic submissions, and on company websites. Updates to accounting packages, Data Storage and Data Management. Operational
IT systems being implemented.
Environmental Information Regulations (2004) This law, which compliments the FOI Act, gives the public the right to request environmental information. Manufacturers, in particular, will have to make data available on areas such as, pollution, carbon emissions, noise, radiation, the use of genetically modified organisms and health & safety information. Workflow
Database
Security
Storage
Data Mining
Portal
Communications
Networking
Backup
Disaster Recovery
Operational
Operating and IT solutions emerging.
EU Waste Electrical & Electronic Equipment Directive [WEEED] New standard for the collection, treatment, recovery & disposal of waste material and electronics. Information & tracking through storage, database and potentially enhanced retail and warehouse solutions. Operational
Operating and IT solutions emerging.
Data Protection Act Affects all companies, which must comply with the 8 enforceable principles of good practise in management of personal data. Takes precedence over FoI Act. Security
Data Management
CRM
Workflow
Document Management Systems
Operational
Operational and demand for IT solutions as part of an integrated
Sarbanes-Oxley Act (SOX) Act (part of 2002, Sarbanes-Oxley Act) which mandates that all auditing firms retain records relevant to audits and reviews also has significant implications on companies’ IT resources. Document Retention Systems
Email Management Systems
Content Management Storage Solutions
Operational
SOX 404 deadline for non-accelerated filers and foreign private issuers in 2007 opening IT solutions for automated reporting including US owned off-shore corporations.
The Companies (Audit, Investigations and Community Enterprise) Act The Act is designed to improve the reliability of financial reporting and reinforce auditor independence and auditor regulations. Includes the need to ensure disclosure of all relevant information to auditors, increased inspection with more detailed reports. Storage
Disaster Recovery
Database
Changes to accounting packages / software systems
Report Generators
Operational
RFID Supply Chain Radio Frequency Identification (RFID) code tags attached to products to provide greater efficiency in tracking and identification. Data storage
Database solutions
Integration with ERPSCM for greater supply chain visibility and fast decision-making.
Operational
RFID mandated by [a] leading retailers (Walmart, K-Mart, Tesco, M&S etc) [b] US Department of Defence to defence contractors, and [c] FDA for pharmaceuticals for fraud detection & clinical trials.
ISO 20000
IT Service Management Standard
ISO 20000 comprises two parts: ISO 20000-1 is the 'Specification for Service Management, and ISO 20000-2 is the 'Code of practice for Service Management'.

Together, these form a top-down framework to define the features of service management processes that are essential for the delivery of high quality services.

ISO 20,0000 allows IT organizations to formally certify their IT services, using ITIL [Information Technology Infrastructure Library] global best practice for IT service delivery.
Security Management
Storage Management
Business Application Management
Server, Network & Device Management
Operational
Rapidly adopted as the international standard for IT Service Management based upon ITIL based upon substantial TCO reduction as business case.
ISO 27001 Information Security Standard ISO 27001 is the formal standard against which organizations may seek independent certification of their Information Security Management Systems to reduce businesses’ information security vulnerability. ERP solutions
IT Security Applications and services
Operational
Rapidly being adopted worldwide as the standard for business’ information security.
IAS (International Accounting Standards) International standards on accounting and the regulation of financial result calculation. Designed to improve transparency and represent a step towards a common global accounting standard. Enterprise integration systems
Data gathering systems.
Operational
The legislation will require significant investment in appropriate systems to facilitate internal reporting and data gathering.
Chip and PIN New transaction standard, requiring all retailers to up-grade their point-of-sale hardware and software. Point-of-Sale (PoS) technology Microchip technology
Training and service support to retailers.
Operational
Standard rapidly being adopted by large retailers.
GCI (Global Commerce Initiative) Headed by over 40 major international companies, the GCI has built a set of standards in the retail/manufacturing industries, to promote global supply chain efficiency and enhance consumer value. Electronic Data Interchange
XML
SCM
ECMS
Operational
Implementation taking place and integrated IT solutions for supply chain emerging.
UCC net Uniform Code Council standard for product identification designed to improve supply chain efficiency by storing all product information in its GLOBAL registry. Supply Chain Technology
Database solutions
Internet solutions
Hardware (scanners)
Operational
Standard being rapidly adopted particularly by large retailers.
Copyright © 2010 Industry Direct Limited. All Rights Reserved.