Privacy Resources
Article :
The protection of sensitive information is a high priority to organizations at large. This page provides useful resources to learn more about privacy initiatives through reports, articles and other sources.
Published on May 09, 2012
United States-Computer Emergency Readiness Team
Guide :
Cyber Security Tip ST04-008—Benefits of BCC Although in many situations it may be appropriate to list email recipients in the To: or CC: fields, sometimes using the BCC: field may be the most desirable option. This Alert discusses some of the privacy
Published on May 09, 2012
National Institute of Standards and Technology
Publication :
This page contains links to publications from the National Institute of Standards and Technology on privacy related topics.
Published on May 09, 2012
Identity Theft
Link :
Learn more about identity theft by visiting the articles and sites on this page.
Published on May 09, 2012
Cloud Computing and Privacy
Link :
This page contains references on the topic of cloud computing.
Published on March 15, 2012
NIST Special Publication 800-98
Guide :
Retailers, manufacturers, hospitals, federal agencies, and other organizations planning to use radio frequency identification (RFID) technology to improve their operations should also systematically evaluate the possible security and privacy risks and use best practices to mitigate them, according to SP 800-98, Guidelines for Securing Radio Frequency Identification (RFID) Systems.
Published on March 15, 2012
AICPA Code of Professional Conduct
Professional Standards :
This page explains the AICPA Code of Professional Conduct. Learn More
Published on March 12, 2012
Privacy Services
Link :
The AICPA has developed a series of assurance and advisory services. These services are focused on building trust and confidence in businesses and are a natural extension of the CPA's auditing and information technology consulting functions.
Published on March 08, 2012
Outsourcing and Privacy 10 Critical Questions Top Management Should Ask
Article :
Although an organization may outsource some of its business processes, the organization cannot outsource its accountability for privacy. This article discusses the 10 critical questions management should ask about outsourcing and discusses specific privacy concerns associated with outsourcing.
Published on March 08, 2012
The NIST Definition of Cloud Computing
Guidance :
The NIST definition in SP 800-145,The NIST Definition of Cloud Computing, characterizes important aspects of cloud computing and is intended to serve as a means for broad comparisons of cloud services and deployment strategies, and to provide a baseline for discussion from what is cloud computing to how to best
Published on March 06, 2012
Guidelines on Security and Privacy in Public Cloud Computing
Guidance :
NIST SP 800-144, Guidelines on Security and Privacy in Public Cloud Computing provides an overview of the security and privacy challenges pertinent to public cloud computing and points put considerations organizations should take when outsourcing data, applications, and infrastructure to a public cloud environment.
Published on March 06, 2012
Mapping of Criteria ISO 27002 to the AICPA and CICA GAPPs Security for Privacy Principle
Executive Summary :
The AICPA and CICA Privacy Task Force cross-referenced or “mapped” the detailed criteria from ISO 27002, to GAPP’s Security for Privacy principle criteria. This mapping document provides users of ISO 27002 (organizations whose information security management practices meet the requirements of the standard) with an understanding of how the information
Published on March 02, 2012
ISO 27002 Mapping to GAPP
Assessment :
To elaborate on the relationship between ISO 27002 and GAPP, the AICPA and CICA Privacy Task Force cross-referenced or “mapped” the detailed criteria from ISO 27002, to GAPP’s Security for Privacy principle criteria. This document contains that mapping.
Published on February 29, 2012
Internal Revenue Code
Article :
IRC Section 7216 prohibits anyone who is involved in the preparation of tax returns from knowingly or recklessly disclosing or using the tax-related information provided other than in connection with the preparation of such returns. Anyone who violates this provision may be subject to a fine or even imprisonment.
Published on February 21, 2012
Gramm-Leach-Bliley Act
Federal Law :
On November 12, 1999, the Gramm-Leach-Bliley Act (GLBA) was passed by Congress with an effective date of November 13, 2000, and compliance date of July 1, 2001. The Act requires any financial institution or business that engages in financial activities to provide a privacy notice to their customers.
Published on February 17, 2012