. . "Compliance has driven interest in ERM. it is seen as a better way to track and document users and access throughout the enterprise -- required by such regulations as SOX, HIPAA and PCI DSS -- than traditional access management systems linked to specific platforms and systems." . .