Statutory and regulatory GRC
The Electronic Communications Privacy Act
was passed in 1986—Public Law 99-508, Statute 1848 and extends the government restrictions on wire taps from telephone calls to include transmissions of electronic data by computer.
Which act is a collection of statues that regulates the interception of wire electronic and oral communications?
90-351; 6/19/68), also known as
the “Wiretap Act”
: prohibits the unauthorized, nonconsensual interception of “wire, oral, or electronic communications” by government agencies as well as private parties, establishes procedures for obtaining warrants to authorize wiretapping by government officials, and.
Which act is a collection of statutes that regulates the interception of wire electronic and oral communications quizlet?
Terms in this set (10)
Which of the follwing is a collection of statues that regulates the interception of wire, eletronci, and oral communications?
The Sarbanes-Oxley (SOX) Act of 2002
was passed as a result of the Enron and WorldCom financial scandals.
Which of the following acts is also known as the Gramm Leach Bliley Act?
Understanding the Financial Services Modernization Act of 1999
. This legislation is also known as the Gramm-Leach-Bliley Act, the law was enacted in 1999 and removed some of the last restrictions of the Glass-Steagall Act of 1933.
Which act requires organizations that retain health care information to use Infosec mechanisms to protect this information as well as policies and procedures to maintain them?
HIPPA
requires organizations that retain health care information to use information security mechanisms to protect this information, as well as policies and procedures to maintain them, and also requires a comprehensive assessment of the organization’s information security systems, policies, and procedures.
Which act is a collection of statutes that regulates the interception of wire?
Statutory and regulatory GRC
The Electronic Communications Privacy Act
was passed in 1986—Public Law 99-508, Statute 1848 and extends the government restrictions on wire taps from telephone calls to include transmissions of electronic data by computer.
Which of the following is a key advantage of the bottom up approach?
The advantage of bottom-up planning is that the team members, i.e. the people who are actively working on the project,
have a say in the project planning and decisions are made collaboratively
. This will improve team communication and team building, and also empowers the team members.
The Economic Espionage Act
is the primary federal statute targeting unauthorized computer use, primarily focusing on unauthorized access and theft of information from computers.
Electronic Communications Privacy Act (ECPA)
[1986] – protects certain wire, oral, and electronic communications from unauthorized interception, access, use, and disclosure.
What are the major exceptions to the wiretap statute?
There are two exceptions for “devices” that can be used without violating the Act:
Telephones and related equipment that are used by a subscriber in the ordinary course of business
, including “extension” telephones. The idea here is to allow employers to listen in on employee conversations with customers.
What is required by GLBA?
GLBA compliance requires that
companies develop privacy practices and policies that detail how they collect, sell, share and otherwise reuse consumer information
. Consumers also must be given the option to decide which information, if any, a company is permitted to disclose or retain for future use.
Who is protected by GLBA?
The Gramm-Leach-Bliley Act requires
financial institutions – companies that offer consumers financial products or services like loans, financial or investment advice
, or insurance – to explain their information-sharing practices to their customers and to safeguard sensitive data.
What is the GLBA privacy Rule?
The Gramm-Leach-Bliley Act (GLB Act or GLBA) is also known as the Financial Modernization Act of 1999. It is a United States federal law that
requires financial institutions to explain how they share and protect their customers’ private information
.
Which type of planning is used to organize the ongoing day to day performance of tasks?
Operational Planning
This type of planning typically describes the day-to-day running of the company. Operational plans are often described as single use plans or ongoing plans. Single use plans are created for events and activities with a single occurrence (such as a single marketing campaign).
Which of the following is a responsibility of an information security department manager?
Serve as
a focal point of contact for the information security team
and the customer or organization. Manage and configure physical security, disaster recovery and data backup systems. Communicate information security goals and new programs effectively with other department managers within the organization.
What is the first step in the CM process?
1.
Planning and Identification
. The first step in the process is planning and identification. In this step, the goal is to plan for the development of the software project and identify the items within the scope.
