An enterprise security manager is mapping organizational compliance requirements across various jurisdictions and industry domains. Match each regulatory framework or legal mandate on the left with its primary governing scope or regulatory requirement on the right.
- Gramm-Leach-Bliley Act (GLBA) Safeguards RuleMandates U.S. financial institutions to establish administrative, technical, and physical safeguards to protect customer nonpublic personal information (NPI).
- Health Insurance Portability and Accountability Act (HIPAA) Security RuleEstablishes national standards for protecting electronic protected health information (ePHI) created, received, maintained, or transmitted by covered entities.
- EU Network and Information Security (NIS 2) DirectiveEnforces baseline cybersecurity risk-management requirements and mandatory incident reporting for critical infrastructure and essential entities in the EU.
- Federal Information Security Modernization Act (FISMA)Requires U.S. federal government agencies to develop, document, and implement agency-wide security programs for information systems supporting operations.
Cevap
GLBA Safeguards Rule matches with protecting nonpublic personal information (NPI) at financial institutions; HIPAA Security Rule matches with protecting electronic protected health information (ePHI); EU NIS 2 Directive matches with cybersecurity standards for essential entities in critical infrastructure across the EU; and FISMA matches with federal agency information security program mandates.
Each regulation serves a specific domain: GLBA protects consumer financial data (NPI), HIPAA governs healthcare information (ePHI), NIS 2 enforces EU-wide critical infrastructure cybersecurity, and FISMA mandates security programs for U.S. federal government agencies.
Adım Adım Çözüm
Anahtar Kavram
Regulatory Scopes and Legal Compliance Frameworks