Prevari Risk Management

Prevari Launches Technology Risk Manager Focus Groups - Asks for Development and Application Feedback from SarbOx and Risk Professionals

Minneapolis, MN, August 18, 2005 – Prevari, Inc. (http://www.Prevari.com), a company dedicated to improving the way businesses manage IT risk and regulatory compliance requirements, has today announced the launch of a series of focus groups designed to gain feedback from risk and Sarbanes Oxley thought leaders in regards to the features, and additional requirements, of its Technology Risk Manager.

The Technology Risk Manager is a quantitative technology risk measurement system and management tool designed to anticipate the impact of future IT implementations on organizational security risk levels.

“In our discussions with users, we found that the Technology Risk Manager could effectively be used to conduct a quantitative Sarbanes Oxley gap analysis,” said Jerry Jeschke, Chief Operating Officer. “In response to this unique application, we’ve determined that a series of focus groups will help us gain deeper insight to requirements and enable us to expand our development vision - directly in response to market needs.”

Prevari currently deploys the Technology Risk Manager at organizations, such as First Minnesota Bank, to provide a predictive view of technology risk based upon a network’s core software.

“As a technology scientist and developer of the Technology Risk Manager I realize how important it is to gain insight to additional requirements directly from the people who may be using this product,” said Dr. Martin Carmichael, Chief Scientist, Prevari. “A series of online focus groups allows us to gain feedback from numerous risk professionals in a condensed period of time.”

As a thank you to qualified focus group participants, Prevari will offer a complimentary technology risk analysis of a subset of their technology environment. This objective view will provide the participants with a “first hand” understanding of how a measured and quantifiable process can provide value within their own environment.

Model-based simulations will help to demonstrate how technology improvements will provide true value to their compliance and risk mitigation initiatives.

Focus Groups will be held online and via teleconference on

* Wednesday, August 24 - 8 PST, 9 CST, 11EST, and
* Thursday, September 8th - 8 PST, 9 CST, 11EST

To qualify for registration at a Fall 2005 Prevari Technology Risk Manager focus group visit: http://www.prevari.com/registration.htm

About Prevari
Prevari Inc. is a company dedicated to improving the way businesses manage IT risk and regulatory compliance requirements. Prevari has developed the Technology Risk Manager, an IT risk measurement system and management tool which leverages the company’s expertise of applying process maturity and quality assurance principles to complete enterprise technology risk management, planning and implementation. KoniKaye Jeschke, President and CEO, was named a Finance & Commerce 2004 Innovator of The Year for development of a breakthrough approach to quantifiably model business technology risk. http://www.Prevari.com

Participate in the Prevari Risk Management Blog at http://risk-management.prevari.com/prevari/

Register for a Prevari Focus Group

Generate Your Own Sarbanes Oxley Gap Analysis

Prevari has developed Comply, the industry’s only method to quantifiably illustrate the technology control gaps that an organization must address in order to comply with Sarbanes Oxley.

Prevari’s focus group is designed to review Prevari’s “Comply” gap analysis and reporting product. Here are the dates for the upcoming focus groups:

Wednesday, August 24
8.00 AM (PST)
9.00 AM (CST)
11.00 AM (EST)

Thursday, September 8th
8.00 AM (PST)
9.00 (CST)
11.00 (EST)

To attend a focus group, visit http://www.prevari.com/ContactInfo.asp?download=0

For information about how Prevari can help effectively meet and exceed required Sarbanes-Oxley compliance reporting criteria, contact Prevari at 763-377-3241.

myC.R.O. Solutions Changes Name To Prevari

Minneapolis, MN, August 04, 2005 – http://www.mycrosolutions.com – myC.R.O. Solutions, a firm dedicated to improving the way businesses manage IT risk and regulatory compliance requirements, has today announced that it has changed its name to Prevari.

Prevari, which originates from the Latin “praevenio”, means “to come before” or “to anticipate”.

As the developer of breakthrough predictive IT risk modeling solutions, myC.R.O. Solutions has changed its name to Prevari to illustrate the company’s ability to “anticipate” the impact of future IT implementations on organizations’ security risk levels.

“Changing the company’s name to Prevari better communicates the company’s core competencies,” said KoniKaye Jeschke, CEO. “Prevari indicates our ability and expertise in predictive IT risk modeling solutions. The technology offers the industrie's only method to measure, model and effectively manage the technology risk of an entire enterprise”.

myC.R.O. Solutions currently deploys its information technology risk modeling solutions at organizations, such as First Bank Minnesota, to provide a predictive view of technology risk based upon an organization’s technology infrastructure.

“We are on the cutting edge of developing breakthrough IT security risk and compliance solutions,” said Jeschke, “As the name, Prevari, suggests, we are able to predict not only the results of future IT implementations, but also the needs of the industry as a whole.”

myC.R.O. Solutions also recently launched its proprietary Comply™ product, a security compliance support module that uses predictive IT risk modeling to provide a repeatable approach to Sarbanes-Oxley compliance.

For more information on meeting and exceeding Sarbanes-Oxley compliance requirements, visit the new Prevari website at www.prevari.com or call 763-377-3241.

About myC.R.O. Solutions
myC.R.O. Solutions is dedicated to applying process maturity and quality assurance principles to complete enterprise technology risk management, planning and implementation. myC.R.O. Solutions has developed the proprietary Risk Analysis Engine (RAE) product and its supporting Comply™ module. KoniKaye Jeschke, President and CEO, was named a Finance-Commerce 2004 Innovator of The Year for development of a breakthrough approach to quantifiably model business technology risk.

For more information, visit the new Prevari website: www.prevari.com

Media Contact
Karen Sams 
Misukanis & Odden 
KSams@MisukanisOdden.com 
952 400 0234

Tags: it, Sarbanes-Oxley, prevari

How To Dig Out From Under Sarbanes-Oxley

Article by Ben Worthen Via CIO Magazine

Companies are experiencing the reality that the auditing community has not defined clear standards on how to judge 404 compliance as defined by Sarbanes Oxley. The auditors are training on their client's time, and the clients are paying the bill while companies continue to implement reactive measures, versus a proactive and constructive method to define effective controls. New tools such as Prevari's Technology Risk Manager, provide the proactive mechanisms to “take control” of the auditing process, and provide a clear road map for audit focus and control remediation.

Study: Sarbanes-Oxley Results in More Pay For Internal Auditors

Article Via Inside

Indiana

Business

The need for improved internal controls, as defined with SOX regulations, have shown a strong need for internal auditors.  This increased demand is being reflected by increased salaries.  Internal auditor salaries have increased 27% over last year's salaries.

THe Heart of Sarbanes-Oxley

Article by Sanjay Srivastava Via Sarbanes-Oxley Compliance Journal

The business processes which surround SOX compliance add value to an organization.  Ongoing controls and measured trend analysis, will help to elevate technology risk from a subjective art to an objective management process.

The Shift to Holistic Compliance

Article by Maria Wakem Via Wall Street & Technology

Complying with multiple regulations requires a holistic approach that seeks to eliminate redundancy in the overall compliance program.  Individual siloed compliance programs are being viewed as  redundant and cost prohibitive.  A guideline that helps to define a strategy for a holistic and enterprise approach is suggested in this article.  Innovative tools to help measure risk in an enterprise-wide view will help to reduce the cost of compliance, and demonstrate reusable purposes across SOX and other regulatory initiatives.

Report: Sarbanes-Oxley could threaten security

There is a growing concern that the fear of meeting section 404 compliance requirements, may cause organizations to over invest in security controls that are not appropriate given the business needs of the organization.  This highlights the need to gain a measured and objective view of how technology risk should be managed in the context of organizational risk.  Through objective measurement, organizations can make informed decisions that are based upon fact, not opinions or FUD (fear, uncertainty and doubt).

Article by Keith Regan Via Tech News World

Report: Sarbanes-Oxley could threaten security

Article by Steve Ranger Via ZDNet News

There is a growing concern that the fear of meeting section 404 compliance requirements, may cause organizations to over invest in security controls that are not appropriate given the business needs of the organization.  This highlights the need to gain a measured and objective view of how technology risk should be managed in the context of organizational risk.  Through objective measurement, organizations can make informed decisions that are based upon fact, not opinions or FUD (fear, uncertainty and doubt).

Six Steps for SOX Compliance

Article by Brian McDonnell Via Insurance Networking News

Helpful insights on how companies can prepare for section 404 control requirements as required by 7/15/05.  Key observations include the need to audit IT activities, identify and communicate all compromises, define mitigation approaches and demonstrate year to year improvements of all established control processes.  In order to manage critical control processes, it is necessary to effectively measure the effectiveness of these processes, and establish a repeatable process for ongoing measurement and reporting. Prevari offers the industries only objective process to provide a proven measurement methodology for security and risk controls.