Laws, Regulations, and Compliance
Mike Chapple, James Michael Stewart, Darril Gibson · 2018
The chapter covers various types of laws that deal with computer security issues, examining the legal issues surrounding computer crime, privacy, intellectual property, and a number of other related topics. The chapter also covers basic investigative techniques, including the pros and cons of calling in assistance from law enforcement. Civil laws form the bulk of the body of laws as they are designed to provide for an orderly society and govern matters that are not crimes but that require an impartial arbiter to settle between individuals and organizations. The executive branch of the government charges numerous agencies with wide-ranging responsibilities to ensure that government functions effectively. It is the duty of these agencies to abide by and enforce the criminal and civil laws enacted by the legislative branch. The Federal Information Security Management Act (FISMA), passed in 2002, requires that federal agencies implement an information security program that covers the agency's operations. FISMA also requires that government agencies include the activities of contractors in their security management programs.