Lumigent recently got a new CEO- a guy called John Capobianco. He is refocusing the company in some interesting ways. What I find most refreshing about the Lumigent GRC story is that its all about compliance hardening existing applications. Lumigent’s strategy is to work with packaged applications vendors to harden their apps for compliance purposes-reporting to industry standards, monitoring user access logs and so on.<\/p>\n
I recently received one of John’s opinion pieces where he described GRC as the new ERP. How could I not agree? I have argued the same thing<\/a>! Recent events in financial services make it even more imperative that organisations treat compliance as a shared service, with a shared flexible infrastructure. You can rest assured the new Obama executive is going to create a lot of new compliance legislation. If you bought a solution to SOX unfortunately that isn’t going to cut it. A compliance oriented architecture<\/a> would have been a better investment. Given the period of rapid change in risk management and compliance that we currently face I am thinking I will probably dust of our COA model, rename it GRC, and see if we can build some community momentum around it. In 2004 organisations weren’t ready to think strategically about compliance, and keeping costs down (we heard a lot of whinging about SOX from public companies, but didn’t see many really smart compliance efforts)<\/p>\n What is important right now is probably ensuring that your packaged apps can deliver compliance capabilities without you having to do the work. The first two apps to be hardened are PeoplesSoft Financials and Deltek Costpoint. Customers include GAP and Bank of America.<\/p>\n 2009 could be a good year for Lumigent.<\/p>\n disclosure: not much to say. Lumigent is not a client. SAP is.<\/p>\n","protected":false},"excerpt":{"rendered":" Lumigent recently got a new CEO- a guy called John Capobianco. He is refocusing the company in some interesting ways. What I find most refreshing about the Lumigent GRC story is that its all about compliance hardening existing applications. Lumigent’s strategy is to work with packaged applications vendors to harden their apps for compliance purposes-reporting<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[1],"tags":[],"class_list":["post-1763","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_featured_media_url":"","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9wfjh-sr","_links":{"self":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/posts\/1763","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/comments?post=1763"}],"version-history":[{"count":0,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/posts\/1763\/revisions"}],"wp:attachment":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/media?parent=1763"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/categories?post=1763"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/tags?post=1763"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}