Security Laws, Regulations and Compliance - 国際情報セキュリティ法規制
US
Financial Sector : GLBA (Gramm-Leach-Bliley Act), US SEC Compliance
Healthcare Sector : HIPAA (Health Insurance Portability and Accountability Act) and subsequent HITECH Act
Federal Government : FISMA (Federal Information Security Management Act), Section 508 compliance
- FISMA：Federal Information Security Management Act of 2002（連邦情報セキュリティマネジメント法)
- FIPS : Federal Information Processing Standards (連邦情報処理規格）
- FISMAは法律、FIPSはスタンダード（NISTが作成）。NISTはFIPS及びNIST SP800シリーズを発行。
https://www.ipa.go.jp/security/publications/nist/fisma.html
Utilities / Energy : NERC/CIP
- 北米電力信頼性評議 (North American Electric Reliability Corporation :NERC)
- 重要インフラ保護サイバーセキュリティ基準 (CIP Standard)
Education : FERPA (Family Education Rights and Privacy Act)
グローバル
Payment Card Industry Data Security Standard (PCI DSS)
Privacy関連
EU
- EU DPD (Data Protection Directive) https://en.wikipedia.org/wiki/Data_Protection_Directive
- European Union Safe Harbor Act (for US) US企業のため、EU Data Protection Directiveに準拠しているのかを認定
Canada
- PIPEDA (Personal Information Protection and Electronic Documents Act)
Mexico
- The Protection of Personal Data Held by Private Companies
US
- COPPA (Children’s Online Privacy Protection Act。児童オンラインプライバシー保護法) : 13歳未満の児童を対称とする
