Marc W.

New York

Business Owner

I am and have been very intrigued by this topic because I own a data disaster recovery company that is working with the Federal compliancies and issues pertaining to HIPAA and Sarbanes Oxley issues.

The compliancies, as written, seem open to interpretation and are, at the very least, vague. I suspect that companies will go overboard in what they comply with just to be or stay out of harms way regarding penalties and constant review by the governing body of auditors.

No entity that is forced to comply is going to be happy with the nature of compliancy, but there are easy measures to ensure total compliancy without breaking the bank. The art of the game is to do the due dillegence needed to get you past the auditors.

Marc