VariTRAK's forward thinking solutions have the approach to compliance monitoring solutions to take organizations to the next level.

 Holistic Approach

Compliance controls have been generally divided into major groups for the purpose of effort: those affecting the financial reporting and management, those that are considered general business and technology controls, and those that are application specific. ERP and application vendors have taken to task the need to build compliance functionality into their applications. However, ERP, and other Application specific Vendors do not account for the diligence of the employee and the other general categories of controls outside of their applications.

People are at the heart of compliance. Communication is their principal tool.

VariTRAK answers the need for Company wide compliance monitoring. The Compliance Monitoring Server assists Managers and Employees in their efforts to oversee and execute the control activities and report in real-time through an easy-to-access web browser interface.

 VariTRAK Core Engine

The VariTRAK compliance monitoring server (VCMS) is an enterprise level software product that consists of core engine that features the basic needs of a monitoring solution: scheduling, communications, archiving, and a library.

 Varitools Server

At the core of the VariTRAK solution is the Varitools Server. The Varitools Server engine is a collaboration server comprised of communications, electronic forms and reporting. The Server is a stand alone, complete scalable application that integrates securely into any portal. Varitools offers extensible electronic forms processing, templates management, password security, SSL, multi-lingual ability, including international character sets, on-line response management, with instant feedback, real time reporting capability, trend analysis, filtering and statistical analysis. Full data export and import capability make the Varitools an effective way to implement and manage compliance solutions.

 Scheduling

Scheduling drives the notifications for timeliness of control activities. The schedule is initially loaded with critical dates for control activities and control item actions. The schedule can be modified by changes to the control activities through updates provided by employees and management. All schedule changes are recorded in audit history. The scheduler reviews schedule items for changes and due dates for sending notices and escalations.

A schedule of when actions are due to be executed to maintain compliance is a base function of the compliance system. All employees and management have access to the schedule for planning for the organization (resources, budget, critical milestone dates, etc.)

 Communications

Communications delivers email Notices, Escalations and Responses between managers, employees and the Compliance Monitoring Server. The communications functions integrate with email and messaging systems leveraging corporate IT assets.

 Archiving

Archiving is an important function of the Compliance Monitoring Server. Any change to the business structure, control activity, responsibility assignment, test plan, execution or change results in entries to the Archiving system. As notices are received, actions taken, and results recorded, entries are logged in a secure database. The Archiving database is not editable. Auditable details are retrieved in the form of reports and online access to the details of the 'who, what, where and when' of the history of compliance activities. From the activity recorded, Management will be able to demonstrate to any auditing or governing body, the historical and real time recording of the actions taken, or not, and when taken by whom, with evidence that will demonstrate the due diligence efforts of the organization to comply.

 Library

The Library function of the Core engine stores controls, tests, business processes, and organizational structures for policy, training and reuse. Managers can make quick use of the depth of the library to implement existing control hierarchies to reduce the development time when changes occur in the organization. Compliance Officers can use the Library to create standards for controls to be implemented by managers across the organization. VariTRAK uses the Library to offer packages of controls for your organization to use. Cobit controls to be used for IT Governance may be preordered with your server. Check with your Sales Representative for more information.