Compliance

Organizations face a range of legislative requirements which focus on information protection and control. Some regulations protect sensitive customer or patient information (SB1386,GLBA, PCI, HIPPA) while others emphasis internal control and information integrity (SOX, NASD2711).
These regulatory acts require organizations to report and monitor usage and ensure that adequate control processes are in place. Many list in detail the security measures required in order to comply. Regulation is a significant driver, forcing organizations to ensure compliance regardless of the overall state of the economy.