This firm often assists regulated entities with
compliance-related concerns such as information security, due
diligence, software licensing, and data breach notifications. As
the universe of compliance obligations expands, so too does a
company's exposure portfolio. This increase in liability may
result from a software publisher audit, failure to provide notice
to customers about a data breach, or governmental agency
fines. Compliance, like many other aspects of the business
world, is a balance of risks. Unfortunately, it often takes an
organization being rebuked in some fashion before it realizes the
importance of failure to be in compliance.
One of the most important tasks an organization can do with
respect to compliance is to view its relevant policies and
procedures as a living, dynamic set of documents. Compliance
policies must constantly evolve with the changing environment for
several reasons, but consider the following:
