Issues

Government Authentication
Personal Identity
Federal Standards
Governance
R&D
Resources
Legislation and Policy
Liability
Power Grid
Procurement


Library

o Government Authentication Library
o Personal Identity Library
o Federal Standards Library
o Governance Library
o R&D Library
o Resources Library
o Legislation and Policy Library

CRE Interventions
  Agency Administrative Actions
  Rulemaking
  Litigation

 ICANNfocus Archives

 

A Map For CyberSecurity Regulatory Maze
The Industry Advisory Council (IAC) has released a Federal Regulatory Compliance Guide & Matrix, "that details current federal regulation requirements for administrative functions and physical and technical safeguards related to information security."

The goal of the matrix is to "assist federal information assurance and cybersecurity professionals in the management and documentation of regulatory compliance requirements that agencies generally encounter in daily operations..."

IAC was established to "industry and government executives together to exchange information, support professional development, improve communications and understanding, solve issues and build partnership and trust, thereby enhancing government's ability to serve the nation's citizenry..." IAC was founded by the American Council for Technology (ACT), a non-profit educational organization which seeks "to assist government in acquiring and using information technology resources effectively and efficiently."

Among the many values of the matrix is that it "helps in identifying the functional overlap of multiple regulations where a given agency may be required to comply." The matrix also helps "to identify those areas where inconsistencies or conflicts exist when an agency is required to comply with multiple, conflicting regulations."

Thus, in addition to providing industry and federal stakeholders with practical assistance in ensuring compliance the federal information security regulations, the Regulatory Compliance Guide & Matrix may also be able to help point the way to improving the federal cybersecurity regulatory regime(s).

  • See ACT/IAC Press Release

  • Copyright © 2005 The Center for Regulatory Effectiveness.
    All rights reserved.