CHAPTER 17Regulations

The global business community continues to usher in new regulations and laws that affect and increase corporate responsibility for internal controls. This chapter reviews the development of regulations related to internal controls with respect to the use of information and technology. In particular, this chapter addresses the following:

• An introduction to legislation related to internal controls

• The Sarbanes-Oxley Act of 2002

• The Gramm-Leach-Bliley Act

• Privacy regulations such as California SBI 386

• The Health Insurance Portability and Accountability Act of 1996

• EU Commission and Basel II

• Payment Card Industry (PCI) Data Security Standard

• Other regulatory trends

An Introduction to Legislation Related to Internal ...

Get IT Auditing Using Controls to Protect Information Assets, 2nd Edition, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.