Who:
Fidelity National Financial / FIS
9339 Carroll Park Drive
San Diego, CA 92121
When: March 2003
What: Client faced several audit findings related to SAS 70 reports and Sarbanes-Oxley compliance centered on systems development and systems change management.
The Challenge: The client needed to balance complex compliance requirements with efficient and reliable IT capabilities.
The Solution: The client adopted a policy management process to create and maintain policies,
standards and procedures. Then developed, documented and i mplemented processes for systems development, change control, incident management, backup and IT operations, project methodology/SDLC and bug tracking, security management and standards, records retention, data retention, asset management, access control, vendor management, service levels (SLA/OLA) information classification, password management and privacy and protection.
The Result: The client addressed all open audit issues and was prepared for full Sarbanes-Oxley compliance.
Related improvements in IT systems and processes helped the client reduce system downtime moving from 99% availability to 99.99% availability. The client also realized a 40 percent gain in IT productivity.