REGULATORY REQUIREMENTS SUPPORTING CYBERSECURITY AWARENESS TRAINING [38]

International Law [38]

• General Data Protection Regulation (GDPR)

US Federal Laws, Regulations, and Treaties [38]

• Computer Security Act

• Federal Education Rights and Privacy Act (FERPA)

• Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules

• Gramm-Leach-Bliley Act (GLBA)

• FACTA – Federal Trade Commission (FTC) Red Flags Rule

• Federal Information Security Management Act (FISMA)

• Federal Acquisitions Regulation (FAR)

• EU-US Privacy Shield Framework

US State Laws, Regulations and Directives [38]

• Georgia, Governor’s Executive Order

• Georgia Cybersecurity Board

• Massachusetts Data Security Law

• New York Cybersecurity Regulation

• Texas Health Privacy Law

Standards and Policy [38]

• Payment Card Industry Data Security Standard (PCI-DSS)

• ISO/IEC 27002

• NIST Special Publication 800-53 (Revision 4)

• USG Board of Regents Policy Manual

• Chancellor’s Memorandum concerning “Cybersecurity Awareness Month”

• USG IT Handbook

USG IT HANDBOOK COMPANION GUIDE [38]

Related Terms