Forum

Hi Levi,

The first question I would ask before I go looking for an authority on this matter would be:

What are the regulations for industry in which your company participates?

For example, suppose that your company has a government contract, or perhaps it is a medical establishment. HIPAA, SOX, GLBA, PCI DSS, or any number of other industry or gov't regulations could come into play - mandating that your company comply with certain security parameters.

Devinator