How do government regulations such as Health Insurance Portability and Accountability Act (HIPAA) and Gramm-Leach Bliley Act (GLBA) address Web application security?
Requires Free Membership to View
Web security is not specifically called out in HIPAA, GLBA, Sarbanes-Oxley or even the Federal Information Security Management Act (FISMA). Only general info security and system requirements are discussed. However, Visa's Payment Card Industry Data Security Standard (PCI) does have sections specifically dedicated to Web security. I predict we will see more focus on Web security in government regulations in the future due to the rapid growth toward a Web-enabled world.
More information:
* Encryption may help regulatory compliance
* Commentary: Why companies still struggle with compliance
More information:
* Encryption may help regulatory compliance
* Commentary: Why companies still struggle with compliance
This was first published in February 2006
Join the conversationComment
Share
Comments
Results
Contribute to the conversation