Vertali podcast – Your crown jewels are at risk: why mainframe compliance can’t be ignored

In the latest episode of the Vertali Podcast, James Loftus, Technical Delivery Manager – Security at Vertali, discusses the growing importance of mainframe compliance, risk and audit.

With more than three decades of experience spanning mainframe operations, IT security, auditing and technical delivery, James explains why organizations can no longer leave the mainframe in the corner to simply “get on with things”. As connectivity and regulation increase, businesses need a more proactive approach to protecting the systems that hold their most critical data.

Why mainframe risk is changing

The mainframe is no longer a siloed box. It connects to Windows machines, Unix systems, web interfaces and databases around the world. That greater connectivity creates opportunity, but it also expands the potential attack surface. The conversation around compliance and risk must evolve accordingly.

Keeping pace with regulation

Organizations must navigate a growing range of frameworks and requirements, from Sarbanes-Oxley and PCI DSS to HIPAA and individual US state-level rules. These obligations are not interchangeable, and the consequences of falling short can be significant. Understanding which standards apply, and how they affect the mainframe, is essential.

Compliance is a baseline – not the finish line

Being compliant does not automatically mean being secure. Frameworks establish a baseline, but every environment is different. Where the risk demands stronger controls, organizations must be prepared to go further rather than treating a passed audit as proof that the job is done.

Move from reactive to proactive

Too often, investment in mainframe security follows an incident, an audit finding or a near miss. By then, leaders may be left asking how long a vulnerability has existed. James’s message is straightforward: assess risk early, strengthen controls and do not wait for something bad to happen.

Listen to the conversation

This episode offers practical insight for security leaders, auditors and mainframe teams responsible for protecting an organization’s “crown jewels”. As James puts it: “You need to protect that as much as you can.”

Listen to the full episode of this Vertali Podcast here to discover how a proactive approach to compliance, risk and audit can help protect your mainframe environment.