IT591 Unit 5 - It is important to understand how compliance

IT591 Unit 5

Purpose

It is important to understand how compliance and penalties differ across statutes, regulations, and contractual obligations, as this will affect decisions that need to be made in security controls that an organization will need to implement and will also have an impact on performing an accurate risk assessment. In this assignment, you will provide a specific example of a statute, a regulation, and a contractual agreement for an industry of their choice. You will discuss the differences in the origin of each, the compliance requirements of each, and the penalties for each within that specific industry.

Assignment Instructions

1. Select an industry of your choice (retail, education, military, healthcare, financial, government) and briefly describe that industry in today’s world and discuss any changes occurring within the industry that are relevant for security.
2. For that industry, identify one specific relevant statute, one relevant regulation, and one relevant contractual obligation that might exist.
3. Create a header for Statute, Regulation, and Contractual Obligation. For each, describe the origin of the statute, regulation, or need for contract. Discuss the compliance requirements for the statute, the regulation, and the contract. Discuss the penalties that exist for the lack of compliance under each.
4. Describe the statute, regulation, and contractual obligation in terms of how it might affect a security risk assessment for the organization. 

Assignment Requirements

• 4–5 pages of content (exclusive of cover sheet and references page), using Times New Roman font style, 12 point, double-spaced, using correct APA formatting, and include a cover sheet, table of contents, abstract, and reference page(s)
• At least 1 credible source cited and referenced
• No spelling errors
• No grammar errors
• No APA errors