Regulatory Compliance

In my previous post, DevSecOps and Release Coordination, I introduced the idea of four key players in the DevSecOps mediated release management process. The idea is to consolidate the validation and approval steps from a “gated” process, and shift the actual work of validation earlier in development. In this post, we will explore the role […]

Cloud computing is now ubiquitous throughout the software development industry.  There are many cloud service providers offering everything from ‘bare-metal’ virtual servers to complete server-less computing platforms.  The speed by which computing resources can be reserved and instantiated is a major contributing factor to the success of DevOps, where repeatability and automation is central.  However, […]

This week in Orlando, FL, #HIMSS19 brings together more than 45,000 health information and technology professionals, clinicians, executives and vendors from around the world. Agency over your own healthcare data was a running theme in the HIMSS 2019 panel session  titled “Personalized Patient Relationships and Connect Care Journeys.” Ashwini Zenooz, Senior Vice President and General […]

Compliance with the CCPA requires robust processes for identifying, governing, distributing, and securing consumer personal information. The first steps are to document the current usage of this information: Data inventory: Generate lists of personal data related to clients, investors, employees, counter parties, prospects and other entities. Data recipients: Compile a list of entities, such as […]

The first step any financial institution must take in its response to the new CCPA law is to evaluate its exposure and current state of readiness. We can help firms identify gaps, including areas that need immediate action and longer-term changes to support the program. Areas that may require immediate action include any of the […]

Compliance with the CCPA will be challenging because it represents major changes in how financial institutions conduct their business. DATA DISPERSION Consumer personal data is often scattered across multiple internal platforms and shared with many third parties. Firms may not have a full picture of where this information is stored and how it is controlled. […]

As stated in our previous blog, complying with the CCPA requires a strategic approach that covers all stages of planning, analysis, implementation, and quality assurance. A comprehensive compliance program includes all of the following: PLANNING Impact analysis, as well as business case and roadmap development Identify the project work streams Establish the program governance model […]

The state of California has passed a digital privacy law that requires businesses to make disclosures about their collection, use, and dissemination of consumer personal information. The California Consumer Privacy Act (CCPA) will have far-reaching effects on how financial institutions manage their customer data. Compliance will be difficult for firms with disparate silos of customer […]

Understanding the new current expected credit loss (CECL) regulation, how it impacts an organization, and how to go about implementing and managing a response program will be critical for firms carrying financial assets covered by the accounting standard update. Companies will need to understand the history and lifecycle of their data and processes, and engage […]

Organizations will need to modify or redesign their loss reserve processes and systems based on the new CECL standard in light of the substantive changes in methodology. As CECL requires a forecast of loan losses over the life of the instrument, both at the time of origination as well as the revaluation on an ongoing […]

Entities must first include the new CECL disclosures in their financial statements and regulatory reports (e.g., the quarterly call report), commencing with the aforementioned effective dates. There is no separate filing requirement for CECL. The structure and granularity of an entity’s income statement and balance sheet does not to change, as the details of the […]

Editor’s Note: This guest blog post comes courtesy of Gail Cole with Avalara. The U.S. Supreme Court’s decision in South Dakota v. Wayfair, Inc. is a game changer for online sellers and other businesses that sell across state lines. A state can only tax a business that has nexus, a significant connection to the state. For decades, nexus […]