Security, Privacy and Compliance Policies
The foundation of any risk management program begins with the establishment and
documention of a series of business policies that identify a business´s objectives, strategies and
conditions for addressing compliance with necessary security, privacy, business processes and controls
necessary to address the regulatory requirements for a business.
The following are a samle series of policies, many of which are necessary to be established and
enforced to comply with most of the enacted security compliance standards and laws:
Once the appropriate policies are established and implemented,
all management, employees and related business partners must be notified, trained and aware of the
requirements, procedures and accountable employees to contact for any issues or breaches
according to the policy. Each policy should also be reveiwed and updated, as appropriate,
given revisions and updates required for the policies.
Vosity´s management team, staff and partners can help identify and formulate
appropriate policies required for businesses to comply with the following standards ... FISMA/NIST, HIPPA/HITECH, SOX, PCI DSS, ISO 27002:2005 and other international and
local state compliance laws and standards.
|
|
