Chapter 7: Adhering to Standards
Along with all the connected systems, devices, and interactivity, we also see an expansion of the amount of data. With this expansion comes the need to ensure the confidentiality, integrity, and availability of the data. In this chapter, we'll provide an overview of how security standards and laws exist to provide guidelines and best practices to prevent data loss. We'll review some of the guidelines provided by the Federal Information Processing Standards (FIPS) along with the Payment Card Industry Data Security Standard (PCI DSS).
In addition, we'll see that there are strict legislative requirements such as the Health Insurance Portability and Accountability Act (HIPAA) and the General Data Protection Regulation (GDPR). We'll also see how state guidelines such as the California Consumer Privacy Act (CCPA) necessitate due diligence and due care in securing data. Although most of us use encryption to protect our digital data...
