"There are a few tools out there and we looked at a number, but the one thing that really stood out with NetIQ is the complete package that's easy to use and is very flexible," Pap said, adding it was the only tool that delivered proactive capability to monitor security.

"I now have people looking at proactive reports [and] they can see immediately if someone has accessed the system or user profiles have changed."

Pap said the project has given SPT confidence that its corporate data is secure.

"This gives management a level of comfort that we have real-time monitoring, and has enabled my people to become a lot more productive in areas that will drive the business," he said. It has also cut the amount of time-consuming effort spent manually on ensuring security is upheld.Pap believes compliance is "fairly well" implemented in large organizations locally.

The advent of Sarbanes-Oxley in the US has "woken up" a lot of organizations in Australia, many of which are "taking pages out of" the US regulation to satisfy their own requirements.