Public Relations

Asgent Announces the Release of M@gicPolicy Ver.3.2, a Self-inspection/Improvement Tool for Regulatory Compliance Purposes

- Increased versatility enables support for compliance with various regulations including internal controls and environmental management -

November 15, 2007
Asgent,Inc.

Asgent, Inc. (President & CEO: Takahiro Sugimoto, located in Nihonbashi, Chuo-ku, Tokyo), a pioneer of security solutions, announces the release of “M@gicPolicyQUICK” Ver.3.2, a self-inspection/improvement tool for regulatory compliance.

■ Background

Today, organizations are required to comply with various regulations, such as the ISO/IEC 27000 series （Information Security）, JIS Q 15001 （Personal Information Protection）, the ISO 14000 series （Environmental Management） and the ISO 9000 series (Quality Management) etc. Also, the development and maintenance of internal controls is mandatory under the Japanese version of SOX (commonly called J-SOX).

However, once compliance measures are established, they do not expire and so need to have the flexibility to adapt to changes in the external environment, which requires constant monitoring and improvements. Therefore, the establishment of a framework for monitoring and self-inspection is necessary for organizations to not only meet the compliance requirements of each regulation but also adapt to environmental changes.

“M@gicPolicyQUICK” is an information security PDCA tool developed with the main aim of effectively managing the Plan→Do→Check→Act (PDCA) security policy cycle on an organization-wide scale. By continuously circulating the PDCA cycle, it is possible to not only discover problems that may exist within the organization, but also provide a framework for self-auditing by collating the tasks that each member of the organization must carry out and distributing them in checklist format.

In the latest version of M@gicPolicyQUICK, names that are particular to security have been changed to more general purposes names (e.g. Security Document → Regulation/Document etc) and the functionality to add and remove check items freely is now provided. Due to these changes, it is now possible to utilize M@gicPolicyQUICK as a PDCA tool not only in the security field, but also for environmental management and quality management systems, and for improving/monitoring internal mechanisms for J-SOX compliance.

Also, taking suggestions and comments from existing users into consideration, automatic scheduling for check list distribution, functionality for external auditors to input information directly and flag tasks for improvement of noncompliant items etc have been added, allowing the PDCA cycle to be managed more efficiently.

■ M@gicPolicyQUICK

Start of Sales: 2007/11/15

Sales Target: 250 units/year

Sales Price: \880,000 （100 users）〜

[Main Features of Ver.3.2]

1. Support for various non-security related fields−Internal Control （J-SOX）, Environmental Management （ISO 14000）, Quality Management （ISO 9000） and Kaizen strategies （Management Kaizen, Internal Kaizen, Operational Kaizen, Sales Kaizen etc）.

   • Change of specialized names to generic names （Security Incident/Accident → Report etc.）

   • Ability to freely add/modify/remove fields/categories/check list items/internal audit items




2. Addition of function to flag tasks for improvement of noncompliant items

   • By adding a function to flag tasks for improvement of noncompliant items, it is possible to carry out progress management and improvement tasks within M@gicPolicyQUICK.




3. Improvements to report functionality

   • The status of each unit (department) can be checked and understood easily with reports. Also, it is possible to understand how effective the improvements to noncompliant items have been by chronologically viewing the improvement rate of noncompliant items.




4. Integration with directory services, etc.

Case Example

• As an improvement tool for internal J-SOX mechanism development

  By registering the key controls for the risk control matrix in M@gicPolicyQUICK and distributing them to relevant personnel, it is possible to monitor the implementation status and any problems, and carry out improvements.




• As a monitoring tool for J-SOX

  By registering check lists/key controls for general control and operation processes in M@gicPolicyQUICK and distributing them throughout the company, it is possible to carry out self-inspections and evaluations of the operational situation.




• As a PDCA tool for environmental management systems and quality management systems

  By registering the check list items related to ISO 14000 and ISO 9000, the operational situation for the entire organization can be monitored and improved. Also, by registering internal audit items, it can be utilized as and internal auditing tool.




• Kaizen strategies

  • As a tool to implement corporate policy through the entire company
  • As a tool to spread the message from management to all employees
  • As a tool to implement points for improvement in sales activities

Operating Environment

[Company Outline]