|
The Sarbanes-Oxley Act (SOX) and the Basel II accord mandate a number of requirements that affect a wide variety of IT-related activity in financial institutions. Using the Zachman Framework can help companies identify requirements and regulations, and aid in compliance. The Zachman Framework allows for the segmenting of complex structures into smaller chunks that can be more easily analyzed and examined. It identifies points of view that dominate the industry including the planner's view (scope or contextual), the business owner's view (conceptual), the designer's view (physical), and the builder's view (out-of-context). All views examine different aspects of a problem such as people, data, activities, locations, organizational roles, motivation, and timing. Two key principles in SOX and Basel II target transparency and governance. For Basel II calculations, an auditor or supervisor is required to trace systems that were involved in a particular risk-weighted capital amount back to the source. This is known as data lineage. Stewardship and governance come up in many sections of both Basel II and SOX. Basel II requires that adequate documentation must be in existence, and validation must occur for risk models and their calculations and data. SOX mandates that data used in processes must be vouched for by senior executives, and must be of high quality.
|