Regulatory requirements
Requirements for the reliability of websites and other network nodes are essential and are described in many industry standards. Here are some of the best known:
- GDPR — the General Data Protection Regulation; while not a standard in the strict sense, it is a European regulation that requires organizations to protect the personal data of EU citizens.
- PCI DSS — the Payment Card Industry Data Security Standard, a data security standard for organizations that process payment cards, designed to protect cardholder information.
- ISO/IEC 27001 — an international standard for information security management, covering the creation, implementation, maintenance and continual improvement of an information security management system (ISMS).
- HIPAA — the Health Insurance Portability and Accountability Act; in the US this law requires healthcare providers and other organizations handling medical information to ensure the confidentiality and security of health data.
Site protection is not only a matter of security but also of business and reputation. Effective security measures help protect both users and the business itself from a variety of risks.
Tag cloudTLS
