4.1 Regulatory Compliance

What is compliance?

Meeting the standards of the laws, policies, and regulations.

What are penalties?

Fines, incarceration, and loss of employment.

What does the scope of compliance include?

National, territorial, or even state laws.

What does scope of requirements include?

Domestic and international requirments.

What is data localization?

Data from a region or country is stored withing the borders of that region.

What is the General Data Protection Regulation (GDPR)?

European Union regulation that makes rules on protection and privacy for individuals in the EU.

What can users do with their data once it’s stored in the EU?

They can request removal of data from search engines.

What is the Payment Card Industry Security Standard (PCI DSS)?

Standard for protecting credit cards.

What are the six control objective of PCI DSS?

Built and maintain a secure network and system

Protect cardholder data

Maintain a vulnerability management program

Implement strong access control measures

Regularly monitor and test networks

Maintain an information security policy.