|
In recent years, Congress has enacted several laws intended to
enhance information sharing within various industries. These
congressional acts also require the protection of a client's sensitive
personal information. These new laws include:
- Health Insurance Portability and Accountability Act of 1996
(HIPAA)
- Sarbanes-Oxley Act of 2002 for Financial and Accounting
Disclosure Information
- Gramm-Leach-Bliley Act of 1999 for Financial Services
Modernization
- Federal Information Security Management Act of 2002 (FISMA)
The legal community has also been effected by the vast amounts on
unintentional data contained in electronic documents, and new rules are
also forming in the area of Electronic Discovery.
The commercial release of Document Detective is based on Department
of Defense regulations and security policies require a reliable human
review of 100% of the information transferred by an individual who is
knowledgeable of the subject matter. This would typically be the user
who created the document. Unfortunately, the typical user has neither
the training nor the tools necessary to conduct this review adequately.
The Document Detective security scanner was designed specifically to
meet the US Government's 100% reliable human review criteria, and SRS can
provide the necessary training so that users apply this tool
effectively. Security regulations and policy that apply to electronic
document transfers include:
- DOD 8500.1, "Information Assurance (IA)", 24 October 2002
- DOD 8500.1, "Information Assurance (IA)", Implementation, 6
February 2003
- DOD 5200.22-M
- DOD 5200.2-STD
- DCIC 6/3
- NISPOM Chapter 8
- Joint Department of Defense Intelligence Information System
(DoDIIS)/Cryptologic Sensitive Compartmented Information (SCI)
Information Systems Security Standards (JDCSISSS), Revision 2, Chapter
18
- DIAM 50-23, Enclosure 7, 1 March 2002
- Army Regulation 25-2, BBP #03-EC-T-0002
- JCS/J2 SOP 50-31, 12 June 2001
|