Monday, April 6, 2020

Compliance in Cybersecurity

If you are not familiar with cybersecurity compliance, you will be soon. More and more companies are forced into compliance as privacy issues and theft affect their businesses. IT compliance is defined as the actions or facts of complying to a regulation. Regulations are high-level guidelines created for specific industries to address specific problems.

Here are a few real-world examples of regulations that impact IT pros:
The global finance industry uses credit card numbers, and those numbers must be encrypted to avoid theft, so the Payment Card Industry Data Security Standard (PCI DSS) was created.
The health care industry uses patient health information (PHI) that must be securely transmitted to doctor’s offices and insurance providers, so the United States created the Health Insurance Portability and Accountability Act (HIPAA).
Federal governments work on national security, so the United States created the Federal Information Security Management Act (FISMA) to ensure all agencies secure their data.

More recent privacy laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) ensure customer data is protected and stored locally to the consumer. That means if you are a U.S.-based company and you have customers in Europe, you must ensure the customer data is stored in Europe and bound by European laws, even though your company is in the United States. IT teams must work harder to ensure they comply with the growing number of regulations.
More Info: entry level it certifications

No comments:

Post a Comment