Links for Sites of Interest about Regulatory Compliance

As a final post to those who attended my presentation, the following are some links to resources that may assist you in learning more about some of the regulatory compliance standards, and how it may affect you. It is in no way complete, but resources I have bookmarked that I have used in the past.

• SOX Compliance for the Security Practitioner - A collection of resources which offers tips and strategies for keeping your organizations compliant with the ongoing demands of the Sarbanes-Oxley Act.
  
• SOX Security School - Free, multi-media Security School which shows you exactly what you need to do to meet SOX's ongoing demands and arms you with actionable items to ensure your business remains continuously compliant.
  
• HIPAA Learning Guide - s A collection of news articles, analysis reports, expert advice, white papers and case studies that will help keep you on track with HIPAA.
  
• HIPAA Covered Entity Determination Questionnaire - IOWA statewide HIPAA Impact Assessment Criteria document. Nicely laid out
  
• HIPAA Security and Electronic Signature Standards - A bullet item list of some HIPAA security related requirements.
  
• 
  
• UCSB SB1386 Guidelines - University of California in Santa Barbara SB1386 guidelines. Excellent interpretation and guidance of the bill.
  
• How To Comply with the Privacy of Consumer Financial Information Rule of the Gramm-Leach-Bliley Act - A Guide to GLBA for Small Business from the Federal Trade Commission
  
• Payment Card Industry (PCI) Self-Assessment Questionairre
  
• Meeting the PCI Data Security Standard requirements mitigates threats
  
• Symantec Compliance Assessment Tool - Free software tool (requires registration) that can run a compliance check for any two of these regulations simultaneously: Sarbanes-Oxley, FISMA, HIPAA, GLBA, Basel II, Payment Card Industry - Data Security Standard.