Question

Discuss the laws and regulations that most impact information security professionals. Include the following in your discussion:

• The roles of those responsible for upholding the laws
• How ethics and politics across various domains (space, maritime, and physical) of states and global nations differ from those in the U.S.
• Your experience with any of the laws and regulations

Answer 1

Some laws and regulations that most impact information security professionals are---->

1.> HIPAA (Health Insurance Portability and Accountability Act)

What this law regulates ----->

This act is a two part bill.

Title I: protects the health care of people who are transitioning between jobs or are laid off.

Title II: meant to simplify the healthcare process by shifting to electronic data. Also it protects the privacy of individual patients.

2.> Sarbanes Oxley Act-->

What this law regulates--->

This act requires companies to maintain financial records for seven years. It was implemented to prevent another Enron scandal.

3.> Federal Information Security Management Act of 2002 (FISMA)

What this law regulates--->

This act recognized the information security as matters of national security. Thus, it mandates that all federal agencies develop a method of protecting the information systems.

4.> Family Educational Rights and Privacy Act (FERPA)

What this law regulates--->

Section 3.1 of the act is concerned with protecting student educational records.

5.> Payment Card Industry Data Security Standard (PCI-DSS)

What this law regulates--->

A set of 12 regulations designed to reduce fraud and protect customer credit card information.

The roles of those responsible for upholding the laws are affected by these acts in many ways. Soem are as follows:

1.> The sort of company affected by HIPAA (Health Insurance Portability and Accountability Act) is any company or office that deals with healthcare data. That includes but is not limited to doctor’s offices, insurance companies, business associates, and employers.

2> U.S. public company boards, management and public accounting firms are affected by Sarbanes Oxley Act.

3.> Any postsecondary institution including universities, academies, colleges, seminaries, technical schools, and vocational schools are affected by  Family Educational Rights and Privacy Act (FERPA).

4.> Companies handling credit card information are affected by Payment Card Industry Data Security Standard (PCI-DSS).

For the last part, I am extremely sorry as i cannot answer that question because i have no experience with any of the laws and regulation as of now.

Thanks, Have a good day :)