Module 3 Regulations and Frameworks Flashcards

1
Q

what does GLB stand for

A

Gramm-Leach Bliley

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what is Gramm-leach Bliley

A
  • also known as the Financial Modernization Act of 1999
  • a federal law enacted in the United States to control the ways financial institutions deal with the private information of individuals
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what is NERC

A

*The North American Electric Reliability Council (NERC)
* Cybersecurity Standards requires
power utilities to assess and enhance their security environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what is NERC commonly referred to as

A
  • Critical Infrastructure Protection (CIP) standards 002 through 009
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

why did Sarbanes-Oxley act of 2002 come about

A
  • In the wake of Enron and WorldCom accounting debacles came the SarbanesOxley Act of 2002 (SOX)
  • Probably the most wide-ranging legislation to affect publicly traded
    companies since the Securities Exchange Act of 1934.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

core objectives of sarbanes oxley

A
  • to restore investor confidence in the financial reporting of
    public companies.
  • SOX holds a company’s officers personally responsible for misrepresentation
    of financial data.
  • A corporate officer who knowingly signs a false financial report can be fined
    up to $1 million and be sentenced as many as 10 years in prison
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what does SOX mean, and when was it created

A

sarbanes-oxley act of 2002

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Key Titles and Sections of the SOX legislation include:

A

Title I: Public Company Accounting Oversight Board (PCAOB)
Title II: Auditor Independence
Title III: Corporate Responsibility
➢ Section 302: Corporate Responsibility for Financial Reports
Title IV: Enhanced Financial Disclosures
➢ Section 404: Management Assessment of Internal Controls
➢ Section 409: Real time Issuer Disclosures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what is an acceptable framework to define internal controls for financial reporting systems

A

COSO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what can COSO also be used to assess other than financial controls

A

IT controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what does COSO stand for

A

committee of sponsoring organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what does the federal trade commission (FTC) do

A

Working to protect consumers by preventing anticompetitive, deceptive, and unfair business practices, enhancing informed consumer choice and public understanding of the competitive process, and accomplishing this without unduly burdening legitimate business activity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

3 strategic goals of FTC

A
  1. protect consumers
  2. maintain competition
  3. advance organizationsal performance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

what is the accrediting organization for soc auditors

A
  • AICPA
  • American Institute of Certified Public Accountants
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

you have to be a licensed what to perform SOC audits

A

licensed CPA firm or agency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

what is a SOC 1

A

: Controls at a service organization relevant to user
entities internal control over financial reporting. (Auditor’s
opinion to Auditor)

17
Q

what is a SOC 2

A

: Controls at a service organization that are relevant to
security, availability, processing integrity, confidentiality, or privacy.
(Auditor’s opinion to management, and other specified parties).

18
Q

what is a SOC 3

A

Controls at a service organization that are relevant to
security, availability, processing integrity confidentiality, or
privacy. (Auditor’s opinion to interested parties, e.g. anyone in the public)

19
Q

what is APPI

A

Act on the Protection of Personal Information (2003) (APPI) -JAPAN-
establishes responsibilities of the national and local governments and
the obligations of private companies in handling personal information…
Similar to GDPR

20
Q

what are the requirements of APPI

A

Requirements include the ability to safeguard personal data and
protect it against loss, unauthorized access and disclosure

21
Q

what does APPI stand for, and who created it

A
  1. Japan
  2. Act on the Protection of Personal Information
  3. 2003
22
Q

what is Canada’s Person protection document called

A

Personal Information Protection and Electronic Document Act (PIPEDA)