Internet and Web Application Security, 3rd Edition

Security Regulations, Standards, and Guidelines

Business and organizational websites must incorporate and demonstrate compliance with one or more information security regulations, frameworks, and guidelines. Depending on the type of business, its products or services, and the type of data it maintains or archives, a government agency, public law, or association or trade group may require specific storage, use, and retention rules for safeguarding the privacy and integrity of that data. It can be a bit confusing as to which regulations or laws must be followed as their requirements may overlap or be contradictory. Regardless of any of these factors, providing confidentiality, integrity, and availability (CIA) for any data an organization may ...