Regulatory compliance requires all organizations and businesses to protect sensitive end-user data. There is a mandate to meet the guidelines of regulatory bodies. Organizations and businesses must take proactive steps to detect attacks and vulnerabilities that can cause harm. They must produce compliance reports. They must retain logs, run, and analyze reports. Regulatory compliance requires official and regular audits, including audits on demand. There are severe penalties for non- compliance.

Answer the following questions in a sentence or two.
A- Pertaining to ALL sites gathering private data from end users:
1- What is ?in flight? data?
2- What is ?at rest? data?
3- Review the ?Information Shield? website for the US and international community. How can personal data can be secured? Also, how can end users be notified if there is a breach?
4- Referring to compliance, what does the ?C & A? process refer to?

B- Pertaining to E commerce:
1- Summarize the main idea of PCI-DSS (Payment Card Industry Data Security Standard)

C- Financial Sector:
1- Summarize the main idea of Sarbanes-Oxley Act Section 404
2- Summarize the main idea of Gramm-Leach-Bliley Act
3- Summarize the main idea of BITS Shared Assessment Program

D- Government:
1- Summarize the main idea of the Federal Information Security Management Act of 2002
2- Summarize the main idea of the Defense Information Assurance Certification and Accreditation Process
3- Summarize the main idea of FedRAMP
4- Summarize the main idea of NIST (National Institute of Standards and Technology)

E- Health Care Sector:
1- Summarize the main idea of HIPAA (Health Information Portability and Accountability Act)

F- World Community:
1- Summarize the main idea of the ISO27001 International Org for Standards
2- Summarize the main idea of the Cloud Security Alliance

Regulatory compliance requires all organizations and businesses to protect sensitive end-user data. There is a mandate to meet the guidelines of regulatory bodies. Organizations and businesses must take proactive steps to detect attacks and vulnerabilities that can cause harm. They must produce compliance reports. They must retain logs, run, and analyze reports. Regulatory compliance requires official and regular audits, including audits on demand. There are severe penalties for non- compliance.

Answer the following questions in a sentence or two.
A- Pertaining to ALL sites gathering private data from end users:
1- What is ?in flight? data?
2- What is ?at rest? data?
3- Review the ?Information Shield? website for the US and international community. How can personal data can be secured? Also, how can end users be notified if there is a breach?
4- Referring to compliance, what does the ?C & A? process refer to?

B- Pertaining to E commerce:
1- Summarize the main idea of PCI-DSS (Payment Card Industry Data Security Standard)

C- Financial Sector:
1- Summarize the main idea of Sarbanes-Oxley Act Section 404
2- Summarize the main idea of Gramm-Leach-Bliley Act
3- Summarize the main idea of BITS Shared Assessment Program

D- Government:
1- Summarize the main idea of the Federal Information Security Management Act of 2002
2- Summarize the main idea of the Defense Information Assurance Certification and Accreditation Process
3- Summarize the main idea of FedRAMP
4- Summarize the main idea of NIST (National Institute of Standards and Technology)

E- Health Care Sector:
1- Summarize the main idea of HIPAA (Health Information Portability and Accountability Act)

F- World Community:
1- Summarize the main idea of the ISO27001 International Org for Standards
2- Summarize the main idea of the Cloud Security Alliance