click below
click below
Normal Size Small Size show me how
CYB1100-UI CH1.2.1
Foundations of Information Security_THIS LAW IS YOUR LAW
| Question | Answer |
|---|---|
| The bodies of law that define standards for security differ ____ | wildly from one country to another. |
| The bodies of law that define standards for security vary quite a bit from | one industry to another |
| what is a common example of bodies of law that define standards for security differing from industry to industry and country to country | An example of this is the difference in data privacy laws between the United States and the European Union. |
| Organizations that operate globally need to take care | that they’re not violating any such laws (bodies of law that define standards for security) while conducting business. |
| what is good advice when operating globally | When in doubt, consult legal counsel before acting. |
| Some bodies of law or regulations do try to define what | or at least some of the steps you should take to be “secure enough.” |
| The Payment Card Industry Data Security Standard (PCI DSS) is used for what type of companies | applies to companies that process credit card payments |
| Health Insurance Portability and Accountability Act of 1996 (HIPAA) is used for what type of companies | is for organizations that handle healthcare and patient records |
| Federal Information Security Management Act (FISMA) is used for what | defines security standards for many federal agencies in the United States |
| Are these security standards effective | Whether these standards are effective is debatable |
| following the security standards defined for the industry in which you’re operating is | advisable, if not mandated. |