Industry standards
There are many important industry standards that your customers are mandated to follow. The following list is commonly used to justify procurement of funding for products and services:
Health Insurance Portability and Accountability Act (HIPAA): It requires that proper controls are put in place to ensure health care transactions and administrative information systems protect individually identifiable electronic health information. There is a low risk of fines associated with HIPAA non-compliance; however, significant collateral risks, such as civil liability and brand damage could result from not meeting HIPPA requirements.
Federal Information Processing Standards (FIPS): They are U.S. computer security standards developed to protect information transmitted by government agencies and contractors.
Federal Information Security Management Act (FISMA) / National Institute of Standards and Technology (NIST): The FISMA and NIST special publications 800-153 and 800-137 provide...
