Frameworks, standards, and processes

• Regulatory requirements mentioned in Chapter 2, Implementing the First Steps of Basic Compliance:
  • Sarbanes Oxley Act (SOX): http://www.gpo.gov/fdsys/pkg/PLAW-107publ204/content-detail.html
  • Payment Card Industry Data Security Standard (PCI DSS): https://www.pcisecuritystandards.org/
  • Example to PCI DSS based on Windows Azure: http://go.microsoft.com/fwlink/?LinkId=389876
  • Bundesdatenschutzgesetz (BDSG): http://www.bfdi.bund.de/cae/servlet/contentblob/409518/publicationFile/25234/BDSG.pdf
• Official ITIL website: http://www.itil-officialsite.com/
• Microsoft Operations Framework: http://technet.microsoft.com/en-us/library/cc506049.aspx
• ISO official website: http://www.iso.org/iso/home.html
• Unified Compliance Framework: https://www.unifiedcompliance.com/
• German BSI: https://www.bsi.bund.de/DE/Themen/ITGrundschutz/ITGrundschutzInternational/intl.html
• Auditing Standard SSAE 16 Reporting Standard (enhancement of SAS70) especially enhanced for Cloud solutions and outsourcing...