Organizations today have to live with constant pressure to secure their organizations from cyber attacks as well as have a plan for how to react in the case of an attack. At the same time, they need to be able to stay in compliance with many regulatory requirements that have been increasingly added by governments and economic blocs. These regulatory requirements often encompass common targets for cyber criminals such as data. Some of the prominent regulations include the following:
- Health Information Portability and Accountability Act (HIPAA)—applicable within the jurisdiction of the US, HIPAA governs the collection, storage, and sharing of health information about patients
- GDPR—applicable for EU citizens, GDPR is focused on protecting user data privacy.
- Fair Credit Reporting Act (FACTA)—applicable within the...