Many of the laws that impact information security professionals are designed to protect the privacy of individuals and protect them against both identity theft and the unwanted disclosure of personal information. In this video, learn about HIPAA, HITECH, FERPA, GLBA, COPPA, the Privacy Act of 1974, and the European Union GDPR.
- [Instructor] Many of the laws that impact information…security professionals are designed to protect…the privacy of individuals and protect individuals…against both identity theft…and the unwanted disclosure of personal information.…In the United States, we have a patchwork of laws…that affect different industries…depending upon the nature of their business…and the types of sensitive information that they handle.…Probably the most well known of these laws…is the Health Insurance Portability and Accountability Act,…or HIPPA.…
Passed in 1996, HIPPA places strict privacy and security…regulations on healthcare providers, health insurers,…and health information clearing houses.…These three groups, collectively known…as HIPPA covered entities, must ensure the privacy…and security of protected health information,…or PHI, that they handle.…HIPPA was updated in 2009 with the passage…of the Health Information Technology for Economic…and Clinical Health, or HITECH, Act.…
The Family Educational Rights and Privacy Act, or FERPA,…
Author
Mike Chapple
Released
5/23/2018Want more CySA+ test prep tips? Visit certmike.com to join Mike's free study group.
- Security governance
- Security roles and responsibilities
- Security policies
- Complying with laws and regulations
- Auditing and assessing security
- Personnel security
- Security training
- Vendor management
Skill Level Intermediate
Duration
Views
-
Introduction
-
Welcome2m 26s
-
-
1. Security Governance
-
Organizational processes3m 13s
-
Control frameworks4m 52s
-
2. Security Policy
-
Security policy framework4m 40s
-
Security policies5m 16s
-
Account policies3m 35s
-
Password policies4m 50s
-
Data security policies5m 17s
-
Data security roles3m 30s
-
-
3. Regulatory Compliance
-
Privacy compliance4m 24s
-
Computer crimes1m 55s
-
Intellectual property4m 16s
-
Software licensing2m 28s
-
Data breaches2m 8s
-
4. Assessing Security Processes
-
Management review3m 14s
-
Metrics and measurements3m 18s
-
Audits and assessments5m 35s
-
Control management3m 37s
-
Maturity models3m 34s
-
-
5. Personnel Security
-
Employee security3m 4s
-
Employee termination process2m 42s
-
Employee privacy2m 23s
-
Social networking3m 52s
-
Personnel safety2m 31s
-
Employee development1m 35s
-
-
6. Awareness and Training
-
Compliance training3m 27s
-
User habits2m 47s
-
User-based threats1m 55s
-
Awareness program reviews1m 20s
-
7. Vendor Management
-
Vendor agreements3m 34s
-
Security as a service1m 29s
-
Conclusion
-
Next steps33s
-
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.
Share this video
Embed this video
Video: Privacy compliance