Milliman Security Management System MS2 Home | Contact | Site Map | Milliman    
Milliman Security Management System
Overview
MS2
MS2:VM
 

Compliance FAQs

 

How does MS2 help your organization comply with the Sarbanes-Oxley Act?

 

MS2 helps your organization meet both Section 302 and Section 404 of the Sarbanes-Oxley Act (SOX), which address an organization’s IT controls.

 

For meeting Section 404 requirements of SOX, MS2 helps an organization achieve and continuously assess internal IT controls. Specifically, it provides an efficient and effective automated mechanism to review and test IT internal controls on a quarterly or continuous basis.

 

MS2 helps meet SOX Section 302 by reporting IT controls in place at both the detail and summary level. In addition, MS2 includes validation testing tools. These reports provide the necessary support documentation for management to sign off and certify IT controls within the organization.

 

 

Compliance FAQs

How does MS2 help implement and maintain an effective security compliance program?


How does MS2 help ensure that the proper security safeguards are in place?


How does MS2 help your organization comply with Sarbanes-Oxley?


How does MS2 help with Gramm-Leach-Bliley Act (GLBA) compliance?


Are all the elements of the GLBA Safeguard Rule included in MS2?


What kind of security risk assessment methodology does MS2 use and does it conform to NIST (National Institute of Standards) protocols?


Why does MS2 map controls to standards such as NIST and ISO?


What is the ISO 17799 standard, and why is it so important?


Does MS2 calculate a Return of Investment (ROI) for the security gaps identified during the risk and gap assessment?


How does MS2 help achieve HIPAA compliance?


Which features in MS2 help organizations achieve HIPAA Security compliance?


What is the definition of common control?

 

If my vendor says that the system we are using is HIPAA Security compliant, does that mean we are also HIPAA Security compliant?