The need for an Administration System
to show Y2K Due Diligence

Purpose

This is to outline the need for an Administration System to show that Due Diligence has been carried out by an Enterprise to attain Y2K Compliance.

Pending Legislation

According to the Ministerial Media Release 17/12/98 "The Government will legislate to encourage greater voluntary disclosure and exchange of information on Y2K readiness and remediation efforts". OICY2KRAMP is a process that has been researched and developed to enable organisations to provide up-to-date information on Y2K Compliancy status.

Resource Asset Management Program

The OIC Y2K Compliance Consortium (OICY2KCC) has encouraged its members to develop a process using information technology to assist organisations to provide documented evidence of Y2K readiness and remediation efforts. This led to the development of the OIC Y2K Resource Asset Management Program (RAMP).

This project had a number of objectives including:

  1. provide a system to show Y2K readiness and remediation efforts
  2. deliver a long term application - Resource Asset Register
  3. illustrate the benefits of the Internet for managing the process

Why the need for evidence?

There is great difficulty in showing due diligence has been carried out without a defined process and a third-party authentication that a process has been followed properly. The OIC has developed a process and more important a way of monitoring whether that process has been followed properly. The system developed OICY2KRAMP provides documented evidence that:

  1. the organisation has prepared a plan for Y2K checking and remediation
  2. the computerised assets of an organisations have been listed
  3. each item has been checked for Y2K Compliancy
  4. the process for remediating non-compliant equipment, software and user data has been followed
  5. the non-compliant hardware has been replaced and the software patched or replaced
  6. the user data has been remediated for specific

The Administration Process to document and confirm that the Y2K Compliance processes have been followed is extremely time consuming for little return unless the process can be automated effectively. This is what OICY2KRAMP will provide for licencees.