Information Security Resources: Federal USA

Posted on January 8, 2018 by Adora Myers

United States of America Federal Regulations and recommendations affecting Information Security, cyber security, data security and privacy.

ADA: Americans with Disabilities Act (ADA) of 1990: https://www.ada.gov/pubs/adastatute08.htm
CJIS: Criminal Justice Information Services (CJIS) Security Policy: https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center
DMCA: Digital Millennium Copyright Act (DMCS) of 1998 (The DMCA allows internet service providers to shield themselves from liability for copyright infringement due to infringing activity by users of the service provider’s networks.): https://www.copyright.gov/legislation/dmca.pdf
ECPA: Electronic Communications Privacy Act (ECPA) 18 U.S. Code
- 119: Chapter 119 – WIRE AND ELECTRONIC COMMUNICATIONS INTERCEPTION AND INTERCEPTION OF ORAL COMMUNICATIONS: https://www.law.cornell.edu/uscode/text/18/part-I/chapter-119
- 121: Chapter 121 – STORED WIRE AND ELECTRONIC COMMUNICATIONS AND TRANSACTIONAL RECORDS ACCESS: https://www.law.cornell.edu/uscode/text/18/part-I/chapter-121
EOAA: Equal Opportunity and Affirmative Action, Executive Order 11246 (Presidential Order) – Equal Employment Opportunity: https://www.dol.gov/ofccp/regs/compliance/ca_11246.htm
FCC: Federal Communications Commission (FCC): https://www.fcc.gov
- CPNI: Customer Proprietary Network Information (CPNI) Rules: https://www.fcc.gov/general/customer-privacy
- FCC 47: Federal Communications Commission (FCC) Rules and Regulations for Title 47: https://www.fcc.gov/general/rules-regulations-title-47
FFIEC: Federal Financial Examination Council (FFIEC) Information Technology (IT) Examination Handbook: https://ithandbook.ffiec.gov/
FISMA: Federal Information Security Management Act (FISMA): https://csrc.nist.gov/projects/risk-management/detailed-overview
FTC: Federal Trade Commission (FTC): https://www.ftc.gov/
- FACTA: Fair and Accurate Credit Transactions Act (FACTA) of 2003, Red Flags Rules : https://www.ftc.gov/tips-advice/business-center/privacy-and-security/red-flags-rule
- FCRA: Fair Credit Reporting Act (FCRA), 15 USC § 1681 et seq, Federal Trade Commission (FTC): https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/fair-credit-reporting-act
- GLBA: Gramm-Leach-Bliley Financial Services Modernization Act (GLBA), Federal Trade Commission (FTC): https://www.ftc.gov/tips-advice/business-center/privacy-and-security/gramm-leach-bliley-act
- COPPA: Children’s Online Privacy Protection Rule (COPPA), Federal Trade Commission (FTC), Children’s Online Privacy Protection Act of 1998, 15 U.S.C. 6501–6505: https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/childrens-online-privacy-protection-rule
HSS: Department of Health and Human Services: http://www.hhs.gov
- HIPAA: The Health Insurance Portability and Accountability Act (HIPAA) of 1996: https://www.hhs.gov/hipaa/for-professionals/privacy/index.html
- HITECH: Health Information Technology for Economic and Clinical Health (HITECH) Act https://www.hhs.gov/hipaa/for-professionals/special-topics/HITECH-act-enforcement-interim-final-rule/index.html
NG-SEC: National Emergency Number Association (NENA) Security for Next-Generation 9-1-1 Standard (NG-SEC) Standard: https://www.nena.org/?page=NG911_Security
Privacy Act of 1974: The Privacy Act of 1974 – 552a. Medical Records Maintained on Individuals: https://www.justice.gov/opcl/privacy-act-1974
SEC: Securities Exchange Commission (SEC): https://www.sec.gov
- SOX: Sarbanes–Oxley Act (SOX): https://www.sec.gov/answers/about-lawsshtml.html
SSAE-16: Statement on Standards for Attestation Engagements 16 (SSAE-16): http://www.aicpa.org/InterestAreas/FRC/AssuranceAdvisoryServices/Pages/default.asp
Telecommunications Act of 1934, 47 U.S.C. § 151 et seq.: https://it.ojp.gov/PrivacyLiberty/authorities/statutes/1288
USA PATRIOT: Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT) Act of 2001: https://it.ojp.gov/PrivacyLiberty/authorities/statutes/1281#contentTop

Information Security Resources: International Organizations

Posted on January 1, 2018 by Adora Myers

Organizations providing international information security standards and recommendations:

AUP: Shared Assessments Agreed Upon Procedures (AUP): https://sharedassessments.org/
COBIT: Control Objectives for Information and Related Technologies (COBIT): https://cobitonline.isaca.org/
COSO: Committee of Sponsoring Organizations of the Treadway Commission (COSO) http://www.coso.org/
HITRUST: Health Information Trust Alliance (HITRUST) Common Security Framework – https://hitrustalliance.net/
IEEE 802.11: Institute of Electrical and Electronics Engineers (IEEE) LAN/MAN Standards Committee (IEEE 802) Standard for Information technology—Telecommunications and information exchange between systems Local and metropolitan area networks: https://standards.ieee.org/findstds/standard/802.11-2016.html
ISO/IEC: International Organization for Standardization (ISO)/International Electro technical Commission (IEC):https://www.iso.org
ITIL: Information Technology Infrastructure Library (ITIL), AXELOS: https://www.axelos.com/best-practice-solutions/itil
NIST: National Institute of Standards and Technology (NIST), Computer Security Resources Center (CSRC):https://csrc.nist.gov/
- NIST Cybersecurity: National Institute of Standards and Technology (NIST) Cybersecurity Security Framework http://www.nist.gov/cyberframework/
- NIST FIPS 199: National Institute of Standards and Technology (NIST) Bulletin; Federal Information Processing Standard (FIPS) 199: Standards for Security Categorization of Federal Information and Information Systems:https://csrc.nist.gov/publications/detail/fips/199/final
- NIST FIPS 200: National Institute of Standards and Technology (NIST) Bulletin; Federal Information Processing Standard (FIPS) 200: Standards for Security Categorization of Federal Information and Information Systems:https://csrc.nist.gov/publications/detail/fips/200/final
- NIST FISMA: National Institute of Standards and Technology (NIST), Federal Information Security Modernization Act (FISMA):https://csrc.nist.gov/Projects/Risk-Management/Risk-Management-Framework-(RMF)-Overview/Security-Categorization
PCI DSS v3.2: Payment Card Industry (PCI), Data Security Standard (DSS) Version 3.2:https://www.pcisecuritystandards.org/document_library
Privacy Shield: EU-U.S. Privacy Shield Framework: https://www.privacyshield.gov/welcome Fact sheet:https://www.commerce.gov/news/fact-sheets/2016/02/fact-sheet-overview-eu-us-privacy-shield-framework
SEI CMU: Software Engineering Institute (SEI) at Carnegie Mellon University (CMU), Insider Threat Program, Research and Publications: https://www.sei.cmu.edu/index.cfm

The Culture of Complicity

Quote

Posted on March 28, 2016 by Adora Myers

Amazon.com

“But I think there is something deeper going on here, and it turns on the very nature of bureaucratic systems. Such institutions always create a culture of complicity. It’s not just that some people get to break the rules—it’s that loyalty to the organization is to some degree measured by one’s willingness to pretend this isn’t happening.”

“Career advancement is not based on merit, and not even based necessarily on being someone’s cousin; above all, it’s based on a willingness to play along with the fiction that career advancement is based on merit, even though everyone knows this not to be true. Or with the fiction that rules and regulations apply to everyone equally, when, in fact, they are often deployed as a means for entirely arbitrary personal power.”

–The Utopia of Rules: On Technology, Stupidity, and the Secret Joys of Bureaucracy by David Graeber

The Iron Law of Liberalism

Quote

Posted on November 30, 2015 by Adora Myers

Amazon.com

“This apparent paradox—that government policies intending to reduce government interference in the economy actually end up producing more regulations, more bureaucrats, and more police—can be observed so regularly that I think we are justified in treating it as a general sociological law. I propose to call it “the iron law of liberalism”: The Iron Law of Liberalism states that any market reform, any government initiative intended to reduce red tape and promote market forces will have the ultimate effect of increasing the total number of regulations, the total amount of paperwork, and the total number of bureaucrats the government employs.”

–The Utopia of Rules: On Technology, Stupidity, and the Secret Joys of Bureaucracy by David Graeber

Adora Myers

Tag Archives: Regulation

Information Security Resources: Federal USA

Like this:

Information Security Resources: International Organizations

Like this:

The Culture of Complicity

Quote

Like this:

The Iron Law of Liberalism

Quote

Like this:

Share this:

Like this:

Share this:

Like this:

Share this:

Like this:

Share this:

Like this: