Seeing is believing: Designing visualizations for managing risk and compliance

This paper explores the design of visualizations that support mandated organizational compliance processes. We draw on the research literature to show how visualizations can operate as effective user interfaces for complex, distributed processes. We argue that visualizations can reduce the complexity of such processes, making them easier to manage, and can facilitate the communication and collaboration that are critical to supporting compliance. We describe the design and pilot deployment of a visualization that supports the IBM Sarbanes-Oxley Act compliance process, discussing design alternatives, the final design, its deployment, and lessons learned.