Company
Security Compliance Corporation (SCC) was founded in 2005 by Silicon Valley executives with the mission of simplifying IT compliance. SCC is revolutionizing the compliance industry by promoting new solutions to common business challenges. Our mission is to help customers realize tremendous business value and cost savings through compliance automation. We are leading a paradigm shift in IT by developing automated solutions to labor-intensive compliance efforts.
Access Auditor® automates the periodic review and certification of user access rights and entitlements. SCC’s workflow engine provides the ultimate flexibility in defining and managing the periodic attestation of user access rights. The enhanced Identity Mapper™ utilizes a proprietary algorithm to link user accounts from disparate systems back to the correct person, even when common identifiers or login IDs do not exist. Access Auditor’s consolidated view of user access rights enables customers to identify orphaned accounts left behind from terminated users, thus reducing the risk of fraud and audit findings. By automating labor-intensive tasks related to user access rights and separation of duties, SCC’s customers improve security while minimizing the costs of compliance.
Worldwide compliance needs are the new reality facing businesses. Controlling access to financial and personal information is fundamental to any successful and secure enterprise. Specific controls are now required, both in the United States and abroad, to comply with security and privacy legislation, including:
- Sarbanes-Oxley Act (SOX) Gramm-Leach-Bliley Act (GLBA)
- Health Insurance Portability and Accountability Act (HIPAA)
- Canadian Personal Information Protection and Electronic Documents Act (PIPEDA)
- European Union Privacy Directive
In today's world of ever-increasing regulations and growing demand for data privacy, strict monitoring and control of access to information is critical at every level of an organization. A major challenge is to integrate auditing, monitoring, and archiving of access information; the solution is Access Auditor.