COMPLIANCE Flashcards
1
Q
PCI-DSS
A
if card data stored, we must respect these rules
2
Q
FISMA
A
all the government, and corps working for them. Limit the risks for critical data.
3
Q
SOX (Sarbannes Oxley)
A
All public corp and accountable to audit financial reports
4
Q
HIPAA
A
Health Insurance Portability and Accountability Act:
health’s corp that share transfert /handle data should be concerned to HIPAA
5
Q
GLBA
A
Gram-Leach-Biley Act: each finnancial institution should have policy and process to non-public data and how to protect them
6
Q
Iso27001 ISMS
A
Auditable international Standard for security of IT System (ISMS)
7
Q
NIST-800-42
A
Testing methodologie for security
8
Q
Common Criteria
A
international set of specifications and guideline to evaluate IS
9
Q
NIST-800-53
A
Security Controls to US Federall agencies
