Home 
IT Compliance Articles Global Compliance Initiatives: What do They Mean for Me?
IT Compliance Articles Global Compliance Initiatives: What do They Mean for Me?
|
| The compliance
acronyms roll right off our lips these days: HIPAA, SOX, PCI. All these
and many others are top-of-mind to executives and practitioners throughout
the industry. What about the European Union Directive 2002/58/EC, or India's
Information Technology Act? As the need to protect data moves from a local
to a global concern, many governments are taking notice and have implemented
their own versions of data-protection laws. While there are strengths
to having this legislation in place, there are several hazards that organizations
must be aware of when considering doing business in other countries.
The compliance
acronyms roll right off our lips these days: HIPAA, SOX, PCI. All these
and many others are top-of-mind to executives and practitioners throughout
the industry. What about the European Union Directive 2002/58/EC, or India's
Information Technology Act? As the need to protect data moves from a local
to a global concern, many governments are taking notice and have implemented
their own versions of data-protection laws. While there are strengths
to having this legislation in place, there are several hazards that organizations
must be aware of when considering doing business in other countries.
Best Practices Are Not Regulations Many organizations have spent a great deal of money improving security practices. There has been constant media attention to and subsequent loss incurred by organizations who've failed to safeguard their data. This brought security to the fore for many executives, many of whom are beginning to pay close attention to the security posture of their companies. Unfortunately, having solid security practices in place does not necessarily make those organizations compliant. It's important for organizations to understand the difference between implementing security as a best practice and implementing it for regulatory compliance. Take as an example message archiving, which for many organizations serves as both a best practice and a requirement for regulatory compliance. Message Archiving: Best Practice vs. Compliance Requirement Depending on the nature of a business, message archiving needs can range from archiving e-mail solely for disaster recovery to archiving all messages to comply with government-mandated regulations. Although on the surface these results appear similar, they are distinct and must be addressed differently. [Read More]
Set as favorite
Bookmark
Email this
Hits: 2940 Trackback(0)Comments (0)
|
TrackBack URI for this entry
Subscribe to this comment's feed