Enterprise Administration Guide › Creating Reports › Security Standards

Security Standards

With the migration from a paper-based operational environment to one that focuses on electronic media, corporations have become significantly exposed to local and remote attacks on those data. To address these concerns, several security initiatives have been implemented in the areas of general global security, financial accuracy and reporting, the safe guarding of private monetary information and individual identities, the protection of health-care related information, and a US government-wide standardization of security best practices.

The following security standards, acts, and requirements provide a useful summary of the root of the best practice reporting that is being performed by CA Access Control reporting service:

Payment Card Industry Data Security Standards (PCI DSS)

PCI DSS is an industry standard that was developed by the major credit card companies to help prevent security issues including fraud and hacking. Companies who accept, capture, store, transmit, or process credit and debit card data must comply with PCI DSS.

Health Insurance Portability and Accountability Act (HIPAA)

HIPAA is a United States federal law that protects health insurance coverage when workers change or lose their jobs. HIPAA also addresses the security and privacy of health data.

Sarbanes-Oxley Act (SOX)

SOX is a United States federal law that stipulates standards for financial reporting. It applies to the boards and management of all U.S. public companies.