c. US
the need
| US is a litigious society – failure to comply may land you in court |
| governance and regulatory compliance today is primarily about data protection, information security and the organization’s general control environment. |
| doing the right thing in the first places saves plenty of money and the firm’s reputation |
Click on any of the hyperlinks and get more information about the tool and/or service:
With compliance initiatives such as the Sarbanes-Oxley Act (SOX), BASEL II, and California SB 1386 (as well as other data security breach laws) it has become imperative that a company models its controls to ensure a transparent audit trail.
Firms in particularly litigious industries such as financial services, healthcare, life sciences, construction, retail and manufacturing often face high numbers of legal matters, and need to retain, preserve and access relevant information contained in bodies of e-mail messages. The discovery of electronic information in e-mail during corporate litigation is increasing, impacted by amendments to the US Federal Rules of Civil Procedure (FRCP) in December 2006.
Firms have a duty to preserve electronic information for the purposes of discovery before litigation starts, at the point when litigation can be reasonably anticipated.
EXAMPLES
In the U.S. failure to comply can result in costly litigation. One recent example is the one from TJX that is paying dearly for the data security breach its customers had to experience. How much it might damage the firm’s reputation and customers’ trust in the firm’s way of handling their personal data including purchasing information remains to be seen:
5 data security breach regulation – judge is spelling out the exact costs for TJX
For more information about court cases and litigation including costs due to lack of risk assessment, risk management, governance and compliance, see her:
- US court cases – data security breaches, non compliance, inproper controls, etc.
SUBSCRIPTION
To make it more convenient for you to take advantage of CyTRAP Labs’ offerings, just provide us with your e-mail address below. You can personalize your subscription to make it suit your needs.






