Rich Buchheim Senior Director Product Management Oracle Corporation

Unstructured Content: The Real Compliance Challenge

Your Company is at Risk  More regulations  Increased costs of non-compliance  Potential damage through discovery

More Regulations Regulation Are You at Risk? Sarbanes-Oxley Act? SEC and NYSE Regulations? HIPAA? USA Patriot Act? ISO17799? Food and Drug Admin., title 21? NASD 3010, 3110? Freedom of Information Act? Gramm-Leech-Bliley Act? UK, AUS/PRO? MoReq/ISO15489? etc … ? Regulation Are You at Risk? Sarbanes-Oxley Act? SEC and NYSE Regulations? HIPAA? USA Patriot Act? ISO17799? Food and Drug Admin., title 21? NASD 3010, 3110? Freedom of Information Act? Gramm-Leech-Bliley Act? UK, AUS/PRO? MoReq/ISO15489? etc … ?

To Make Matters Worse…  Many regulations are still being defined  Changes to regulations will be ongoing  Few regulations have clear certification processes  New regulations will continue to emerge  “Collisions” between regulations create additional challenges

High Cost of Non-Compliance  Steep fines  Possible jail time for executives  Damage to brand reputation  Negative impact on stock price  Risk of shareholder lawsuits  Potential de-listing from stock exchanges

Potential Discovery Risks  Everything is or will soon be discoverable: – Paper documents – Electronic documents and Web content – – Instant messages – Electronic discussions – Voic – Electronic calendars – Web conference proceedings – Inter-application transactions  Companies are increasingly responsible for the often substantial cost of discovery  Discovery of a single can bring down a company

Where is Your Risk? 30% 70% Unstructured Content Structured Content Business Systems (ERP, CRM, etc.) Customer records, Contracts, , Voic , Memos, Web Conferences, Data Sheets, Instant Messages, Planning Documents, Forecasts, Quotes, etc. Safe and sound in the database

Where is Your Risk? 30% 70% Unstructured Content Structured Content Business Systems (ERP, CRM, etc.) Customer records, Contracts, , Voic , Memos, Web Conferences, Data Sheets, Instant Messages, Planning Documents, Forecasts, Quotes, etc. Scattered across hundreds or even thousands of servers?

Where’s the Solution? Corporate Policy Technology “Perfection” Time

Regulations Imply…  Rapid, reliable access to all content (electronic documents, , instant messages, physical documents, etc.)  Retention and disposition management  Secure access control  Comprehensive action tracking  Content analysis and classification  Well-defined, documented business processes

What’s the Right Technology? “ Adaptability is one of the key requirements for systems that support Sarbanes-Oxley compliance. The full impact and interpretation of this legislation is still emerging and may take some time before fully realized...organizations must choose adaptable systems so deployments can be readily configurable and extensible to meet inevitable changes. ” - Charles Brett, Senior Program Director META Group

What’s the Right Technology? Adaptability Comes From Choosing…  the right architecture  the right tools to implement required solutions and policies—now and for the future  the right technology vendor

The Right Architecture... 1.Consolidates your content – Proliferating servers promotes risk – Consolidation is the key first step to compliance 2.Gets all your content in the database – Your structured content is already there – Get the benefits of the database for all your unstructured content as well 3.Solves the problem once! – Creating “compliance silos” is not the answer – Choose an architecture that supports compliance across all regulations—and for all types of content

The Right Tools Compliance Solutions for Unstructured Content Require:  Comprehensive workflow management  Content and context searching and analysis across all data types  Version management, lifecycle auditing and reporting  Granular security and access control  Categorization management  Collaborative facilities to add business context to content  Consistent, flexible archival, backup, and disaster recovery policies  Integrated process documentation facilities  Compliance functionality as transparent to user as possible!

The Right Vendor  Compliance is a long term and evolving process—choose a vendor who is a long term partner  Compliance touches everything—choose a vendor who can broadly support your enterprise technology needs  And choose a vendor who is committed to compliance—in both their products and their own business processes

Some Unexpected Rewards  Most view compliance as significant added cost of doing business in the new millennium  Steps required to protect business/personal interests can also provide significant productivity benefits and even cost savings  When a business… – knows precisely where information is and how to access it – has information under the control of consistent management policies – fully documents procedures used to manage information – provides its employees with powerful tools for content management and collaboration, supporting compliance can significantly improve operating efficiency and reduce costs

Unstructured Content: The Real Compliance Challenge An adaptable solution—combining the right architecture, the right tools, and the right partners—can help meet the challenge and provide some unexpected rewards

A Q & Q U E S T I O N S A N S W E R S

Next Steps….  Recommended Sessions – Collaboration Suite Track – Listen to Customers & Analysts  EPL  Hays Medical  Infopia (outsourcing) 40142,  Sara Radicati  UNC Chapel Hill  Xerox – Other  Oracle Unversity  OCS in Government  Guru Sessions – Sunir Kapoor – Tues 12:00 – Bill Maimone – Wed 12:00 – Steve McAdams – Thurs 11:00  OTN Chalk Talks – Pemco Aeroplex – Wed 12:30 – Phone Directories – Thurs 11:30  Exhibit Hall – DEMOgrounds – Partner Pavilion – Booth 726  Hands-on Sessions – Marriott Hotel – room C2