<table cellspacing="1" cellpadding="1"> <tr> <td><img height="183" alt="" width="139" src="/Portals/0/Blog/blog-john-weathington.png" /></td> <td> <p valign="top">John Weathington is President and CEO of Excellent Management Systems, Inc., a management consultancy that helps companies improve their regulatory and contractual compliance. John is a long-time, avid user of Quest products, and has partnered with Quest Software for guidance on future product development.</p> <p>John's blog is a discussion for DBA's, database developers, and IT management observations, issues, and solutions, based on his consulting work.</p> <p><font color="#003366" size="3"><strong>Recent postings:</strong></font></p> </td> </tr> </table> http://toadworld.com/BLOGS/tabid/67/BlogId/21/Default.aspx en-US John Weathington webmaster@toadworld.com Thu, 18 Mar 2010 05:30:09 GMT Thu, 18 Mar 2010 05:30:09 GMT http://backend.userland.com/rss Blog RSS Generator Version 3.2.0.15477 US Airways flight 1549 teaches us that improbable events actually do occur sometimes. When the NTSB goes to investigate, the airplane’s black boxes will prove vital in the determination of cause. We can leverage this concept to fortify our chances of surviving a serious investigation. In this article I introduce design considerations for what I call the Black Box Data Store, the important data you need to prove your innocence in an investigation. http://toadworld.com/BLOGS/tabid/67/EntryID/335/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/335/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=335 Fri, 16 Jan 2009 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=335 Coming off of a break myself, it seems appropriate to discuss the architectures what support continuity, when your company takes a break from following compliance policy. In this article, we discuss why this might happen, and what you can do to minimize the disruption this type of break can cause. http://toadworld.com/BLOGS/tabid/67/EntryID/332/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/332/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=332 Thu, 08 Jan 2009 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=332 Control convergence – the effort of staying in compliance while reducing the number of controls – is a big trend in the industry today. In this article, we demonstrate how the data professional can support a control convergence effort, by way of fictitious case study. http://toadworld.com/BLOGS/tabid/67/EntryID/285/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/285/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=285 Fri, 03 Oct 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=285 In this article, we talk about policies – an important area of your companies governance, risk, and compliance program. We discuss what a good policy looks like, and how you can evolve a policy data management system in 3 stages. http://toadworld.com/BLOGS/tabid/67/EntryID/283/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/283/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=283 Thu, 25 Sep 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=283 Human beings, by their very nature, make mistakes. Even seasoned professionals make simple errors on occasion. In this article we explore the “mistake database”, an architecture to help your company minimize errors. http://toadworld.com/BLOGS/tabid/67/EntryID/278/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/278/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=278 Thu, 18 Sep 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=278 On this 7th anniversary of the September 11th catastrophe, we’ll take a close look at how to characterize disaster, and more importantly how to learn and move on. http://toadworld.com/BLOGS/tabid/67/EntryID/276/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/276/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=276 Thu, 11 Sep 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=276 Inaccurate risk probabilities can wreak havoc on the applicability of your risk database. Why go through the trouble of setting it up, if bad probability entries render your database unusable? In this article, we explore the importance of getting the risk probability correct, and ways to improve your accuracy. http://toadworld.com/BLOGS/tabid/67/EntryID/272/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/272/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=272 Thu, 04 Sep 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=272 Compliance usually starts with a fire drill, however intelligent companies take the time to step back and put their compliance into perspective. Risk is the key to understanding and optimizing your compliance program. In this article, we discuss risk as an evolution from compliance, and look at some ways to model it in the enterprise. http://toadworld.com/BLOGS/tabid/67/EntryID/268/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/268/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=268 Thu, 28 Aug 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=268 A consistent pattern that emerges in compliance best practices, is the notion of accountability. Demonstrating accountability is a key component of building a solid compliance program. In this article, we explore the motivation, requirement, model, and architecture to make accountability a reality in your company. http://toadworld.com/BLOGS/tabid/67/EntryID/264/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/264/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=264 Thu, 14 Aug 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=264 A death march is a project that is doomed to fail. If you are in IT, and you are dragged onto a compliance project, chances are you will find yourself stuck here. In this article, I'll give you my tips for identifying a death march, and more importantly surviving one. http://toadworld.com/BLOGS/tabid/67/EntryID/260/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/260/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=260 Thu, 07 Aug 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=260 The new SEC standards for SOX compliance have made it clear that your company should spend more time focused on financial risk. In this article, we’ll explore what’s driving this, how you as a database professional can help out, and some design considerations for a Financial Risk Compliance Data Mart. http://toadworld.com/BLOGS/tabid/67/EntryID/258/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/258/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=258 Thu, 31 Jul 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=258 This article wraps up the series on the types of controls and our discussion of architectures, by taking a look at the adaptive control. We’ll explore how you can support your business deal with the impact of risks, when there is no contingency plan. http://toadworld.com/BLOGS/tabid/67/EntryID/255/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/255/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=255 Thu, 24 Jul 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=255 Nobody likes a firefighting effort, but unfortunately it’s a fact of life that we need to deal with as database professionals. In this article I share my 3 favorite tips for getting through without getting burned. http://toadworld.com/BLOGS/tabid/67/EntryID/250/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/250/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=250 Thu, 17 Jul 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=250 This is a continuation of a skip series that I’m doing on the architecture of different control types. In this article, we discuss Corrective Controls; why we need them, and how to design for them. http://toadworld.com/BLOGS/tabid/67/EntryID/248/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/248/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=248 Thu, 10 Jul 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=248 Is IT centralization a good thing for your company, or is decentralization the answer? In this article we look at the advantages and disadvantages from a compliance point of view, and my conclusion to this age-old debate. http://toadworld.com/BLOGS/tabid/67/EntryID/246/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/246/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=246 Thu, 03 Jul 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=246 Okay, we’ve already learned the prevention is the best medicine. But what do we do when we cannot put preventive controls in place? This article answers that question and more, with more examples and data architecture considerations. http://toadworld.com/BLOGS/tabid/67/EntryID/242/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/242/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=242 Thu, 26 Jun 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=242 In this article, we discuss the importance of understanding your “Really As-Is” process, and the big mistake companies make when building process documents. Then, we explore a data architecture for continuously auditing your process in an automated fashion. http://toadworld.com/BLOGS/tabid/67/EntryID/237/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/237/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=237 Thu, 19 Jun 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=237 In today’s article, we discuss the different types of controls, the best type of control, and considerations for how these controls can be worked into the data architecture of your company. http://toadworld.com/BLOGS/tabid/67/EntryID/232/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/232/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=232 Thu, 12 Jun 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=232 In this article, I scratch the surface on the growing concern of data privacy. We’ll discuss how the industry has reacted to the concern, and how you might start to solution for it. http://toadworld.com/BLOGS/tabid/67/EntryID/229/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/229/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=229 Thu, 05 Jun 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=229 What do you do when your company consistently has compliance weak points that don’t seem to go away? This article explores this condition, and provides the steps that your company will need to go through – and how you will support it. http://toadworld.com/BLOGS/tabid/67/EntryID/227/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/227/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=227 Tue, 03 Jun 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=227 For years now, agile development has been an extremely efficient way to get results while keeping the customer happy. However there are perils, especially for the database people. This article gives you a primer for what to expect, and how to succeed. http://toadworld.com/BLOGS/tabid/67/EntryID/223/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/223/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=223 Thu, 22 May 2008 07:00:00 GMT 2 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=223 If dead people are accessing your database, data breach is right around the corner. In this week’s blog, we discuss database access management concerns, and how to architect a compliance system to handle them. http://toadworld.com/BLOGS/tabid/67/EntryID/219/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/219/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=219 Thu, 15 May 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=219 Here we take a look at end users sending data back to the database. Is it a good idea? What are some of the reasons why your end users would want to do this? And, four key tips to consider when designing in this functionality. http://toadworld.com/BLOGS/tabid/67/EntryID/216/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/216/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=216 Thu, 08 May 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=216 For the last couple of weeks we’ve been talking about controls. Here we round out our series by talking about Segregation of Duties ( SOD ) as a way to keep things in control. Here are some key tips for designing systems that demonstrate control with SOD. http://toadworld.com/BLOGS/tabid/67/EntryID/214/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/214/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=214 Thu, 01 May 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=214 As a follow on to last week’s blog about controlling with reconciliation, in this blog we look at another common control – approvals. Here are some key tips for designing systems that demonstrate control with approvals. http://toadworld.com/BLOGS/tabid/67/EntryID/209/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/209/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=209 Thu, 24 Apr 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=209 In the compliance world, reconciliation is more than just making sure your data loaded properly. Here are some key tips to using reconciliation as a control in your compliance data system. http://toadworld.com/BLOGS/tabid/67/EntryID/205/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/205/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=205 Thu, 17 Apr 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=205 When audits are involved, you are guilty until proven innocent. Here are 4 key strategies to employ in the design of your compliance data system, that will prove your company’s innocence. http://toadworld.com/BLOGS/tabid/67/EntryID/201/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/201/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=201 Thu, 10 Apr 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=201 An introduction to Compliance Data Systems – a data system for the auditors. Here we explore the need, and see where it fits into the technical architecture. http://toadworld.com/BLOGS/tabid/67/EntryID/198/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/198/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=198 Thu, 03 Apr 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=198 Inaugural entry for John Weathington’s Quest for Compliance. Here we get introduced to John, get clear on some compliance related definitions, and get acquainted with the impact compliance has on DBAs, database developers, and IT managers. http://toadworld.com/BLOGS/tabid/67/EntryID/193/Default.aspx John Weathington http://toadworld.com/BLOGS/tabid/67/EntryID/193/Default.aspx#Comments http://toadworld.com/Default.aspx?tabid=67&EntryID=193 Thu, 27 Mar 2008 07:00:00 GMT 0 http://toadworld.com/DesktopModules/Blog/Trackback.aspx?id=193