COMPLIANCE COUNSELOR
What to tell senior management about regulatory compliance
IT Governance Institute
10.18.2005
Rating: -4.00- (out of 5)
|
In the complimentary Powerpoint presentation Information Security Governance – Top Actions for Security Managers, the IT Governance Institute provides actionable advice on how to implement information security governance. Each slide represents one of 18 questions often asked of security practitioners by senior management, and are designed to uncover information security issues. Here, we take a look at the question of regulatory compliance: considerations regarding the question, sources to assist the security manager in determining the appropriate response, evaluation and performance criteria to determine how effectively the enterprise addresses the security considerations, and security program initiatives detailing steps the enterprise should take.
What information assets are subject to laws and regulations? What has management instituted to assure compliance with them?
Considerations for security managers
Organizations are subject to many laws and regulations based on their
To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
jurisdiction, industry, contractual arrangements and legal form (e.g., publicly traded corporation). Many impose strict requirements over the management of information assets, especially the protection of private information such as customer and employee data. A failure to meet these requirements can result in significant penalties, liability and damage to the organization's reputation.
Compliance with the multitude of laws and regulations calls for the application of legal expertise within a formal, ongoing program that identifies all relevant requirements, including privacy limitations, intellectual and property rights, and other legal, regulatory, contractual and insurance requirements. The program must then determine the information security measures needed for compliance and ensure those measures are in effect.
Evaluation and performance criteria
Security program initiatives
Copyright 2005 Information Systems Audit and Control Association (ISACA). All rights reserved. Used by permission.
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchSecurity.com.
Register now
to start rating these tips. Log in if you are already a member.
|
|
|
BROWSE BY TAG
Compliance Counselor,
Information Security Threats,
Identity Theft and Data Security Breaches,
Security Audit, Compliance and Standards,
Gramm-Leach-Bliley Act (GLBA),
FISMA,
HIPAA,
Data Privacy and Protection,
Sarbanes-Oxley Act,
General,
Infosec-Related Regs,
Compliance,
Compliance leadership,
People & policy,
Enterprise Data Protection,
Identity Theft and Data Security Breaches, VIEW ALL TAGS
|
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
