Compliance

Question 1

Criminal Justice Information Services (CJIS)

Answer 1

Used by state and local agencies wanting to access the FBI’s CJIS.

Question 2

Cloud Security Alliance (CSA) STAR Certification

Answer 2

obtained for Azure, Intune, and Power BI. Based on ISO/IEC 27001. includes Commercial Cloud.

Question 3

General Data Protection Regulation (GDPR)

Answer 3

imposes rules on companies, government agencies, non-profits, and others offering goods or services to people in the EU, or related to EU residents (regardless of location the service resides)

Question 4

Health Insurance Portability and Accountability Act (HIPAA)

Answer 4

regulates patient PHI (Protected Health Information). Also satisfies HITECH (Health Information Technology for Economic and Clinical Health)

Question 5

ISO/IEC 27018

Answer 5

related to personal data

Question 6

SOC 1, 2, & 3

Answer 6

standard reporting model used by Microsoft.

Question 7

NIST CSF

Answer 7

a voluntary framework.

Question 8

FedRAMP Moderate & High

Answer 8

for US government and government contractors

Question 9

UK Gov (G-Cloud)

Answer 9

used by UK government services.