Chapter 10 – Legal and Compliance Part I Flashcards

1
Q

What is Criminal Law?

A

Criminal Law encompasses all legal matters where the government is in conflict with a person, group, or organization that violates statutes; includes federal court system. Punishments can be monetary fines, imprisonment, or death. Enforcement is called prosecution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are State Laws?

A

State Laws are laws enacted by a state legislature; federal laws supersede state laws.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are Federal Laws?

A

Federal Laws are laws that affect the entire country; issues of jurisdiction and prosecution are negotiated between law enforcement and courts prior to prosecution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Civil Law?

A

Civil Law is a body of law that deals with personal and community-based law such as marriage and divorce; governs private citizens and disputes. Cases are called lawsuits or litigations and involve restitution of monetary damages or actions, but not imprisonment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a Contract?

A

A Contract is an agreement between parties; in a breach of contract, a party can sue for court-ordered relief in money or other considerations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Common Law?

A

Common Law is the existing set of rulings and decisions made by courts, informed by cultural mores and legislation, creating precedents that parties cite in court.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Administrative Law?

A

Administrative Law consists of laws not created by legislatures but by executive decisions and functions; federal agencies can create, monitor, and enforce their own administrative law.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the ECPA?

A

The ECPA (Electronic Communication Privacy Act) restricts the government from putting wiretaps on phone calls and electronic communication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the GLBA?

A

The GLBA (Graham-Leach-Bliley Act) allows banks to merge with insurance companies and financial institutions while keeping customer account information secure and private.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is SOX?

A

SOX (Sarbanes-Oxley Act) promotes transparency in publicly traded corporations’ financial activities and includes provisions for securing data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is HIPAA?

A

HIPAA (Health Insurance Portability and Accountability Act) protects patient records and data, known as ePHI.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is FERPA?

A

FERPA (Family Educational Rights and Privacy Act) prevents academic institutions from sharing student data with anyone other than parents or students after age 18.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the DMCA?

A

The DMCA (Digital Millennium Copyright Act) protects owned data and makes cracking access controls on copyrighted media a crime.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the CLOUD Act?

A

The CLOUD Act allows US law enforcement and courts to compel American companies to disclose data stored in foreign data centers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is FedRAMP?

A

FedRAMP is a US federal program that mandates a standardized approach to security assessments, authorization, and continuous monitoring of cloud products/services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are Direct Indicators in PII?

A

Direct Indicators are data elements that immediately reveal a specific individual, such as mobile phone number, IP address, or SSN.

17
Q

What are Indirect Indicators in PII?

A

Indirect Indicators are characteristics that can reveal the identity of a person; examples include location, birthplace, and pets.

18
Q

What is Anonymization?

A

Anonymization is the process of removing identifiers from data; certain jurisdictions require this for both indirect and direct identifiers.

19
Q

What is GDPR?

A

GDPR (General Data Protection Regulation) is the EU’s most significant privacy law, codifying principles for handling personal information of EU citizens.

20
Q

What is a Data Subject?

A

A Data Subject is an individual whom PII refers to; a human being.

21
Q

What is a Data Controller?

A

A Data Controller is the entity collecting or creating PII; responsible for unauthorized disclosure of PII.

22
Q

What is a Data Processor?

A

A Data Processor is the entity acting on behalf of the Data Controller, performing manipulation, storage, or transmission of PII.

23
Q

What are ISMSs?

A

ISMSs (Information Security Management Systems) provide a holistic overview of the entire security program within an organization, detailed in ISO 27001.

24
Q

What is eDiscovery?

A

eDiscovery is the process of identifying and obtaining electronic evidence for prosecutorial or litigation purposes; ISO 27050 is the industry standard.

25
Q

What is the purpose of ISO/IEC 27037:2012?

A

ISO/IEC 27037:2012 is a guide for collecting, identifying, and preserving electronic evidence.

26
Q

What is the purpose of ISO/IEC 27041:2015?

A

ISO/IEC 27041:2015 is a guide for incident investigation.

27
Q

What is the purpose of ISO/IEC 27042:2015?

A

ISO/IEC 27042:2015 is a guide for digital evidence analysis.

28
Q

What is the purpose of ISO/IEC 27043:2015?

A

ISO/IEC 27043:2015 outlines incident investigation principles and processes.

29
Q

What is the purpose of ISO/IEC 27050-1:2016?

A

ISO/IEC 27050-1:2016 provides an overview and principles for eDiscovery.