How to Complete a Risk Assessment in 5 Days or Less

129

Appendix D

Laws, Standards,

and Regulations

Law and Regulations Description

Model Business

Corporation Act

Originally developed by the American Bar

Association (ABA) in the 1980s to encourage

uniformity within the corporation laws of each

U.S. state.

The Foreign Corrupt

Practices Act (FCPA)

Requires publicly held companies to have adequate

internal controls.

Sarbanes–Oxley (SOX) Requires certification of financial statement by the

CFO and CEO and they must attest that internal

controls are adequate.

Gramm–Leach–Bliley Act

(GLBA)

Primary purpose is to provide privacy of

customer

information by financial service

organizations and comprehensive data protection ...