ABOUT US

Subject Home

Our Services

Unfortunately, far to many organizations fail to fully understand the true scope of the various regulation sets involved in their enterprise.  In many cases, parallel regulations, and their overlap are also left unresolved.  These create significant and unnecessary  risk 

Before you try to comply alone, or use a "Compliance In A Box" solution, you should ask yourself :

• Do you have the staff and the expertise needed internally to meet these federally regulation requirements?
  • Do you have an experienced Privacy professional on staff?
  • Do you have an experienced Information Assurance / Security professional on staff?
  • Do you have an expert Business Process & Work Flow specialist on staff?
  • Do you have a Business Continuity professional on staff?
  • Do you have the benefit of developing and implementing compliance for numerous other organizations?
• If you are going to leave it to your attorney, are they specialized in regulatory compliance?
• Do you have the tools and resources needed to conduct Privacy, Security, and Business Process Audits internally?
• Do you have the resources to implement ongoing Privacy, Information Security, and Disaster Recovery programs?
• Do you have a compliance officer with all the knowledge they need to mitigate your real risks?
• Can you immediately recover from a disaster of any kind?
• Are you prepared to wager your personal fortune and freedom on your staff's current knowledge and commitment to compliance?

Some facts to consider:

• Most business attorneys are not specialized in regulatory compliance.  Proper compliance service organizations work with your attorney to resolve compliance issues, and prepare your organization to manage continuing compliance.
• Federal Privacy & Security Regulations carry fines as high as $100,000 per incident, with Officers, Board Members, and Owners facing additional mandatory fines.  Regulations also include criminal sanctions for disregard of compliance requirements.  Ignorance of requirement is not a defense.
• Compliance must be specific to your organization! Every organization is unique, local governments are nothing like small business who are nothing like large business.  Business in one segment of industry are significantly different from other segments.
• All appropriate employees must be trained.  Effective training requires a comprehensive understanding of the subject matter and educational methods.
• Most organizations that performed their own compliance activities failed their first independent audit.

The goal of our services is to fully understand your organization, either public or private, and help you explore the full depth of your compliance needs. Whether, assessments, project management, training, technical writing, long term support, or more, we can deliver the solution that meets your needs, without the cost of many larger service providers.

Regulatory Compliance Associates, and affiliated companies, have vast expertise in all areas of Privacy, Security, Application (System), and Business Process compliance in a broad range of regulation sets, both domestic and internationally.  Our team of cost effective regulatory warriors can rapidly assist your organization to meet its compliance responsibilities with the least amount of trauma to your organization and workforce.

Our Services focus is on six primary areas:

• Risk & Liability
  Regulatory applicability (triggering condition assessments for covered entity or jurisdiction), Risk Tolerance & Avoidance Strategies, Risk Assessments, Threat Profiling, Risk Management, Expert Witness Services.
• Privacy
  Administrative controls, organizational policies, customer notices, privacy training, and record keeping, auditing.
• Security & Safeguards
  Best practice information assurance (security), certification and accreditation processes, physical safeguards, access controls and authentication, security policies, business continuity and disaster recovery, infrastructure hardening, data management.
• Applications (Systems, including Transactions)
  Regulatory application design, application validation & certification, compliance auditing, transactional requirements, access controls and safeguards, disadvantaged (ADA & 508) user requirements.   More Information
• Business Processes
  Business process and work flow design, regulatory compliant processes, process controls and oversight, regulatory reporting, and work flow design.
• Business Integrity Controls (Sarbanes-Oxley)
  Administrative management controls, organizational control policies, training, and record keeping processes, auditing, and application certification.

Our Services are broken down in the following categories.  In each case, specific tasks are integrated into your project to maximize the achievement of your goals:

• Executive & Administrative Services
  Knowledge transfer, briefings, orientations, policies, and administrative controls.
• Risk & Liability
  Regulatory applicability (triggering condition assessments for covered entity or jurisdiction), Risk Tolerance & Avoidance Strategies, Risk Assessments, Threat Profiling, Risk Management, Expert Witness Services.
• Privacy
  Administrative controls, organizational policies, customer notices, privacy training, record keeping, auditing, assessments, policies & procedures, business process changes, safeguards, customer rights management, record management, application validation, change control.
• Security & Safeguards
  Best practice information assurance (security), certification and accreditation processes, physical safeguards, access controls and authentication, security policies, business continuity and disaster recovery, infrastructure hardening, data management, assessments (system and physical), risk and threat profiling, risk mitigation, policies & procedures, planning, process and work flow reengineering, administrative controls, training, detection and intervention, business continuity, certification and accreditation, change control.
• Applications (Systems, including Transactions)
  Regulatory application design, application validation & certification, compliance auditing, transactional requirements, access controls and safeguards, disadvantaged (ADA & 508) user requirements; readiness assessment, compliance validation, compliance integration, deployment assessments, certification and accreditation, safeguards & privacy controls, transactional compliance, business continuity, migration planning, policies & procedures, compliance training.   More Information
• Business Processes
  Business process and work flow design, regulatory compliant processes, process controls and oversight, regulatory reporting, compliant process automation, risk assessments, human factors assessment, administrative and technical controls, safeguards and privacy controls, policies & procedures, business continuity, process migration planning, training.
• Audit Services
  Existing business process audits, best practices audits, compliance audits, regulatory overlap audits, workforce compliance and training audits, customer rights audits, business associate and trading partner audits, vulnerability audits, administrative controls audit, corporate information integrity audit (Sarbanes-Oxley Sec 404).
• Business Integrity Controls (Sarbanes-Oxley)
  Administrative management controls, organizational control policies, training, and record keeping processes, auditing, and application certification.
• Certification & Accreditation (NIST800 C&A/DITSCAP)
  An administrative management process to assess, certify, and authorize (approve) system processing prior to operations and periodically thereafter.  
  More Information:  on C&A, on DITSCAP
• Expert Witness Services (click here)
  Assistance in case evaluation and development, forensic compliance assessments, best practices base-lining, business process mapping, trial services. 

Additional details about services for specific regulations can be found on our individual regulation websites (links at right).  Please visit the specific site for more details.

Each service is tuned to your specific needs.  Please contact us for details relating to the specific services and deliverables for each regulation, tailored to your exact organizational requirements.

We have unique expertise with these regulations, the regulatory process, and the governmental entities that create and enforce these regulations. We are in constant contact with Federal Agencies to help expand the common knowledge, and obtain guidance to ease the compliance transition for our clients.  Our team has decades of experience within government and industry, and has not only dealt with most regulatory issues, but chaired organizations actively developing compliance standards. Our knowledge has been developed from extensive first hand experience along with the available body of knowledge, but as frequently occurs, we are also regulatory research experts and can resolve most obscure and gray issues, through legal opinion or guidance.

For more information about us, please click here.

Please contact us to explore your specific regulatory challenges.  Remember, regulatory deadlines don't wait!  It's the LAW!

Call Us Today! +1-727-787-9801 or +1-347-412-0574