Information Security Laws, Rules and Regulations

1.The Information Technology Certifying Authorities Rules 2000 (U/S 87 of IT Act 2000) -Rule 19, 31 & 32 http://www.cca.gov.in/documents/rules.pdf 2.Health Insurance Portability and Accountability Act (HIPAA) http://aspe.hhs.gov/admnsimp/pl104191.htm 3.Gramm-Leach-Bliley Act (GLBA) -Section 502, 503 & 504 http://banking.senate.gov/conf/ 4.Federal Information Security Management Act (FISMA) http://csrc.nist.gov/policies/FISMA-final.pdf 5.Sarbanes-Oxley Act (SOX) -Section 302 & 404 http://fl1.findlaw.com/ 6.California SB 1386 (the "You've Been Hacked" Act) http://info.sen.ca.gov