Family Education Rights and Privacy Act (FERPA)

Federal Deposit Insurance Corporation (FDIC)

Government Information Security Reform Act (GISRA)

Gramm-Leach-Bliley Act (GLBA)

Health Insurance Portability and Accountability Act (HIPAA)

North American Electric Reliability Council (NERC)

Office of Comptroller of the Currency (OCC)

The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99) - is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.

Affected Industries: FERPA gives parents or eligible students the right to inspect and review the student's education records maintained by the school.

Federal Deposit Insurance Corporation (FDIC) - A structured audit program is essential to ensure and assess the quality and effectiveness of an institution's IT audit program. It is necessary to evaluate risk-management practices, internal control systems, and compliance with corporate policies concerning IT-related risks.

Affected Industries: Appraisers, Banks, Credit Card Companies, Credit Unions, Financial Planners, and Mortgage Brokers and Lenders

Government Information Security Reform Act (GISRA) - In October 2000, the President signed this act which requires each Federal, State, and Local Agency to develop, implement, and review a comprehensive Agency -wide security program that includes periodic assessments of security risks to information systems and data as well as the implementation of ongoing information security programs.

Affected Industries: Federal, State, and Local Government Agencies

Gramm-Leach-Bliley Act (GLBA) - protection of customer information is tantamount. GLBA safeguards are required to:

1. Insure the security and confidentiality of customer data.
2. Protect against any reasonably anticipated threats or hazards to the security or integrity of such data.
3. Protect against unauthorized access to or use of such data that would result in substantial harm or inconvenience to any customer.

Affected Industries: Appraisers, Automobile Dealerships, Banks, Credit Card Companies, Credit Unions, Financial Planners, Insurance Companies/Agents, Mortgage Brokers and Lenders, Real Estate Companies/Agents Security Firms

Health Insurance Portability and Accountability Act (HIPAA) - passed by Congress to reform the insurance market and simplify health care administrative processes.

1. Electronic Data Interchange - the electronic transfer of information in a standard format between trading partners.
2. Code Sets - uniformly document the reasons why patients are seen and what is done to during their health care encounters.
3. Identifiers - numbers used to identify health care providers, health plans, employers, and patients.
4. Network Security - develop standards for transmission and storage of health care information to ensure integrity and confidentiality of records at all times.
5. Privacy - standards for appropriate disclosures of individual health information and protection of patient rights.

Affected Industries: All health care providers who transmit health information electronically, health plans and health care clearinghouses.

The North American Electric Reliability Council (NERC) - Critical Infrastructure Protection (CIP) - The standards requires power generation companies to protect their assets from cyber security attack. These standards provide a cyber security framework identifying and assisting with the protection of Critical Cyber Assets to ensure reliable operation of the Bulk Electric System.

Responsible Entities: Transmission Service Provider, Transmission Owner, Transmission Operator, Generator Owner, Generator Operator, and Load Serving Entity

Office of Comptroller of the Currency (OCC) - Charters, regulates, and supervises all national banks. It also supervises the federal branch and agencies of foreign banks.

Affected Industries: Banks and other financial entities

CONTACT US:
      Address:
      DM Technologies
      Columbia, Missouri 65203

      Telephone: 573-874-3838

      Fax: 800-806-7523
      EMAIL US: dmarshall@dmtechsecure.com