News Stay informed about the latest enterprise technology news and product updates.

ITIL aids compliance efforts

ITIL helps financial services company in their Sarbanes-Oxley compliance efforts.

This is the fourth article in our five-part feature on ITIL in the data center. Table of contents

For financial services company Sallie Mae Inc., compliance efforts provided an initial entry to ITIL

"After Sarbanes-Oxley, we had to adopt some rigorous change control standards across the organization," says JoLee Hayes, vice president of enterprise technologies at the Reston, Va.-based company. While Sallie Mae established controls, there were no consistent processes in place, so in 2005, the organization turned to ITIL to standardize on processes for incident, change and release management.

More on ITIL and compliance:
ITIL Best Practices for Achieving Compliance and IT Governance - Expert Webcast  

IT Infrastructure Library: Regulatory compliance benefits and training options
To automate various ITIL processes, Sallie Mae utilizes a trio of tools from CA: Unicenter Service Desk for change management; CA Harvest for application development change management; and CA Endevor for mainframe software configuration management. Implementing and integrating the tools, Hayes admits, was the easy part when compared to gaining support of IT staffers.

"We started out meeting with individual teams," Hayes says. "We educated them about what we wanted to do, and launched pilot projects by platform."

Hayes also says that any ITIL implementation needs the engagement of the most senior IT staff in order to be successful. In Sallie Mae's case, that meant getting buy-in and participation from senior IT personnel in the data center, application development and architecture groups.

As for benefits, Hayes says that standardizing on processes has simplified audit tracking, and maintaining documentation code in a single repository—as prescribed by ITIL—enables Sallie Mae to tie changes in applications to all components in the environment. "ITIL is one of the frameworks within our IT strategy," Hayes says. (Demand management and portfolio management are other facets of Sallie Mae's IT strategy.) Eventually, Salle Mae aims to achieve a broader IT strategy encompassing the entire IT lifecycle from project management on the front end to incorporating customer experience feedback that loops back into future IT offerings.

Dig Deeper on IT compliance and governance strategies

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.