Today's Corporate Executives are faced with an array of Data Security legislation which mandates that they be personally accountable for the protection of customer account information. Crippling penalties present a modern day 'sword of Damocles' hanging above the desks of CTOs, CIOs, CFOs and CEOs.
Simplifying Data Security for Regulatory
Compliance
Proactive network security essential to protecting customer information and
ensuring compliance across multiple mandates.
Introduction.......................................................................................................................................3
Sorting out Data Security..................................................................................................................4
ISO 17799 ................................................................................................................................... 4
GLBA 501, 505b.......................................................................................................................... 5
HIPAA.......................................................................................................................................... 6
PCI Data Security Standard ........................................................................................................ 6
Sarbanes-Oxley (SOX)................................................................................................................ 7
BASEL II...................................................................................................................................... 8
PIPEDA ....................................................................................................................................... 9
Information Security Breach and Notification Acts; New York, California SB 1386.................... 9
The Huns at the Gate .....................................................................................................................10
How to Protect Customer Information ............................................................................................12
The role of Vulnerability Assessment in regulatory compliance.....................................................13
A stitch in time....................................................................................................................... 14
Assurance has Arrived.......................................................................................................... 15
Conclusion......................................................................................................................................15
For more information ......................................................................................................................16
netVigilance Inc. 2 Simplifying Data Security for Regulatory Compliance
Introduction
Today's Corporate Executives are faced with an array of Data Security legislation which mandates that they be personally accountable for the protection of customer account information. Crippling penalties present a modern day 'sword of Damocles' hanging above the desks of CTOs, CIOs, CFOs and CEOs.
Recent corporate scandals, the rise in identity theft, reports of miss-handling of sensitive client information has raised awareness and concern over the security of customer financial data. Due to the heavy reliance on the exchange of information; more and more corporations are finding that they are in possession of sensitive information that could be stolen by cyber thieves to perpetrate crimes.
Corporate officers are affected by at least one piece of legislation from the growing list that directly addresses the handling and protection of customer's personal information, levying serious penalties and even jail time for non-compliance. In most cases two or three laws can come into play, they include the following:
. ISO 17799 . Sarbanes-Oxley
. GLBA . BASEL II
. HIPAA . California SB1386
. PCI Data Security Standard . New York Information Security Breach and Notification Act. PIPEDA
C-Level executives need a method to stay informed of the... [download for more]
