U.S. Compliance Laws
Many laws exist in the United States related to information technology (IT) and security. Companies affected by the laws are expected to comply with the laws, which is commonly referred to as compliance. These laws are important to organizations as they develop a comprehensive risk management plan to guide their operations internally and to stay compliant externally.
Many organizations have internal programs in place to ensure they remain in compliance with relevant laws and regulations. These programs commonly use internal audits, and the organizations will frequently reference organizational governance processes that are in place. The organizations can also use certification and accreditation programs. When compliance ...
Get Managing Risk in Information Systems, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.