Security software.

Virsa Systems, a maker of real-time security and controls software, has released Access Enforcer[TM] v1.2, a Web-based component of Virsa's Continuous Compliance[TM] Suite.

Access Enforcer automates the user request and approval process for system access, while incorporating a real-time assessment of risk and the ability to alter or reject the request to prevent controls violations. Automated workflow and self-service password re-set immediately reduces security and help desk cost, while the proactive risk assessment reduces exposure.

As corporations know all too well, the Sarbanes-Oxley Act mandates that companies document processes showing the effectiveness of internal controls and the accuracy of financial information. That's been neither easy nor cheap: Analysts estimate that companies will spend roughly $6 billion on Sarbanes-Oxley compliance in 2005.

"This is only the beginning," said Dr. Mark Feldman, senior vice president of marketing and business development at Virsa. "This past year saw most companies treating compliance as a one-time expense that dropped straight to the bottom line. In 2005, savvy companies will be dumping one-time, one-off compliance solutions for long-term, sustainable compliance mechanisms that flex with business changes, reduce costs through automation and prevention, and yield returns by minimizing internal fraud and optimizing internal processes."

Access Enforcer is a Web-based, open architecture solution, with customizable workflow for automated user authorization to multiple systems. It consists of:

* Compliance Calibrator[TM] -- Real-time risk assessment, simulation and remediation embedded in SAP. Preventive as well as detective.

* Access Enforcer[TM] -- Automated user request, approval and compliant provisioning. Web-based and workflow configurable with proactive compliance checking.

* Role Expert[TM] -- Role definition, documentation and change control with automated compliance checking embedded in SAP.

* Firefighter[TM] -- Eliminates audit concerns over emergency IT support to SAP production systems. Allows unconstrained access buffered by audit trail.

Web: www.virsasystems.com

Material for this column has been developed in most cases from promotional material supplied by the companies, which have not paid to appear in this column.