Rich BuchheimSenior DirectorProduct ManagementOracle Corporation

Unstructured Content: The Real Compliance Challenge

Your Company is at Risk

More regulations

Increased costs of non-compliance

Potential damage through discovery

More Regulations

Regulation Are You at Risk?Sarbanes-Oxley Act ?SEC and NYSE Regulations ?HIPAA ?USA Patriot Act ?ISO17799 ?Food and Drug Admin., title 21 ?NASD 3010, 3110 ?Freedom of Information Act ?Gramm-Leech-Bliley Act ?UK, AUS/PRO ?MoReq/ISO15489 ?etc… ?

To Make Matters Worse…

Many regulations are still being defined Changes to regulations will be ongoing Few regulations have clear certification

processes New regulations will continue to emerge “Collisions” between regulations create

additional challenges

High Cost of Non-Compliance

Steep fines Possible jail time for executives Damage to brand reputation Negative impact on stock price Risk of shareholder lawsuits Potential de-listing from stock exchanges

Potential Discovery Risks

Everything is or will soon be discoverable:– Paper documents– Electronic documents and Web content– Email– Instant messages– Electronic discussions– Voicemail– Electronic calendars– Web conference proceedings– Inter-application transactions

Companies are increasingly responsible for the often substantial cost of discovery

Discovery of a single email can bring down a company

Where is Your Risk?

30%

70%UnstructuredContent

StructuredContent Business

Systems (ERP, CRM, etc.)

Customer records, Contracts, Email, Voicemail, Memos, Web

Conferences, Data Sheets, Instant Messages, Planning Documents,

Forecasts, Quotes, etc.

Safe and sound in the database

Where is Your Risk?

30%

70%UnstructuredContent

StructuredContent Business

Systems (ERP, CRM, etc.)

Customer records, Contracts, Email, Voicemail, Memos, Web

Conferences, Data Sheets, Instant Messages, Planning Documents,

Forecasts, Quotes, etc.

Scattered across

hundreds or even thousands

of servers?

Where’s the Solution?

Corporate Policy

Technology

“Perfection”

Time

Regulations Imply…

Rapid, reliable access to all content (electronic documents, email, instant messages, physical documents, etc.)

Retention and disposition management Secure access control Comprehensive action tracking Content analysis and classification Well-defined, documented business processes

What’s the Right Technology?

“Adaptability is one of the key requirements for systems that support Sarbanes-Oxley compliance. The full impact and interpretation of this legislation is still emerging and may take some time before fully realized...organizations must choose adaptable systems so deployments can be readily configurable and extensible to meet inevitable changes.”

- Charles Brett, Senior Program Director

META Group

What’s the Right Technology?

Adaptability Comes From Choosing… the right architecture the right tools to implement required solutions

and policies—now and for the future the right technology vendor

The Right Architecture...

1. Consolidates your content– Proliferating servers promotes risk– Consolidation is the key first step to compliance

2. Gets all your content in the database – Your structured content is already there– Get the benefits of the database for all your unstructured

content as well3. Solves the problem once!

– Creating “compliance silos” is not the answer– Choose an architecture that supports compliance across

all regulations—and for all types of content

The Right Tools

Compliance Solutions for Unstructured Content Require: Comprehensive workflow management Content and context searching and analysis across all data types Version management, lifecycle auditing and reporting Granular security and access control Categorization management Collaborative facilities to add business

context to content Consistent, flexible archival, backup,

and disaster recovery policies Integrated process documentation facilities

Compliance functionality as transparent to user as possible!

The Right Vendor

Compliance is a long term and evolving process—choose a vendor who is a long term partner

Compliance touches everything—choose a vendor who can broadly support your enterprise technology needs

And choose a vendor who is committed to compliance—in both their products and their own business processes

Some Unexpected Rewards

Most view compliance as significant added cost of doing business in the new millennium

Steps required to protect business/personal interests can also provide significant productivity benefits and even cost savings

When a business…– knows precisely where information is and how to access it– has information under the control of consistent management policies– fully documents procedures used to manage information– provides its employees with powerful tools for content management

and collaboration,supporting compliance can significantly improve operating efficiency and reduce costs

Unstructured Content: The Real Compliance ChallengeAn adaptable solution—combining the right architecture, the right tools, and the right partners—can help meet the challenge and provide some unexpected rewards

AQ&Q U E S T I O N SQ U E S T I O N SA N S W E R SA N S W E R S

Next Steps….

Recommended Sessions– Collaboration Suite Track– Listen to Customers & Analysts

EPL 40381Hays Medical 40341 Infopia (outsourcing) 40142,

40009Sara Radicati 36409UNC Chapel Hill 40372Xerox 36367

– OtherOracle Unversity 40120OCS in Government 40336

Guru Sessions– Sunir Kapoor – Tues 12:00– Bill Maimone – Wed 12:00– Steve McAdams – Thurs 11:00

OTN Chalk Talks– Pemco Aeroplex – Wed 12:30– Phone Directories – Thurs 11:30

Exhibit Hall– DEMOgrounds – Partner Pavilion – Booth 726

Hands-on Sessions– Marriott Hotel – room C2