Simplifying compliance and risk management

Compliance and Risk Management for Energy and Utility Companies

Energy Regulations Supported

TruArx can help organizations comply with close to 500 regulations and standards. Typically, the ones below are most important to our energy clients:

• FERC
• NERC
• SOX 404 (including COSO, COBIT, and 15 others)
• PCI DSS
• NRC 10 CFR § 73.54
• DOE CS 11 Media Destruction Guidance
• Identity Theft Red Flag
• State Privacy / Breach Notification Laws (over 75 laws)
• International Privacy Laws (over 40 laws, including EU Data Privacy and PIPEDA)

Customers Served

TruArx has the energy and utility industry experience to understand your business and technology issues. We are proud to serve:

• 2 of the top 5 oil and gas companies
• Leading North American utilities

Relevant Services

While TruArx provides a wide range of services to clients from SaaS to consulting, the ones below are most commonly requested by our energy clients. Please click the service to learn more.

• TruComply
• TruPCI
• TruAware
• Managed Risk and Compliance Services
• Security Index Assessment (SIA)
• Disaster Recovery / Business Continuity Planning
• Other Consulting Services

Energy and utility companies are no strangers to regulation. However, in recent years the demands have grown significantly with increased financial regulation via Sarbanes Oxley, increasingly stringent industry requirements from NERC and FERC, the ongoing evolution of the Payment Card Industry Data Security Standard (PCI DSS), and new state privacy and breach laws. In addition, energy companies have their own internal policies, procedures, and standards which must be enforced. Increasingly, manual methods of tracking compliance are no longer sufficient and cannot scale cost-effectively to meet new regulatory requirements.

TruArx can help energy companies manage all these regulations and more through TruComply. TruComply is an easy-to-use IT governance, risk and compliance application which can be fully implemented with a few weeks. Energy clients can use TruComply to manage both internal and vendor compliance.

Additionally, TruArx consultants can assist energy clients by providing project-based services such as compliance / security assessments and disaster recovery and business continuity planning. Alternatively, for clients who lack the resources and skills to keep up with their compliance burdens, TruArx consultants can perform most IT compliance and risk management tasks through TruArx’ Managed Compliance and Risk Services.