Industry and regulatory compliance standards help protect computing assets from various security vulnerabilities and misconfiguration, and minimize the risk in various execution environments, such as development, test, and production.
There are different standards such as the following:
- Payment Card Industry (PCI): https://www.pcisecuritystandards.org/
- Health Insurance Portability and Accountability Act (HIPAA): http://www.hhs.gov/ocr/privacy/
- Federal Information Security Management Act (FISMA): http://csrc.nist.gov/groups/SMA/fisma/faqs.html
- Department of Defense Information Assurance Certification and Accreditation Process (DIACAP): http://www.diacap.net/
- Federal Risk Authorization Management Program (FedRAMP): https://www.fedramp.gov/
- Gramm Leach Bliley Act (GLBA): https://en.wikipedia.org/wiki/Gramm–Leach–Bliley_Act
The VMware Compliance...
