Sensitive Information Policy - CIO
Productivity Bundle
Does your enterprise protect its
customers'
Credit Card information?
New laws and regulations mandate that
enterprises protect customers' Credit Card information, employee
confidential data, and enterprise business records. Not only
does section 404 of Sarbanes-Oxley and HIPAA impose strict rules on this, but
the disclosure reporting requirements of several states, including
California, mandate the immediate disclosure of unauthorized
intrusions into that data.
Credit card companies place very strict
requirements on how data relating to credit card transactions can be
captured, storage and enciphering requirements, length of time
data is retained, and how this data is accessed. If these
rules are not followed, the credit card companies can and do
eliminate enterprise's processing and access privileges to the
credit card processing system.
Does your enterprise have the RIGHT
policies and
procedures in place?
Protect
your enterprise and get the CIO productivity bundle or at least get the
Sensitive Information policy. An update service is available so
when there are changes in regulations these tools will remain current.
CIO Productivity Bundle
The CIO productivity bundles contains
everything needed to comply with Sarbanes-Oxley and the immediate
disclosure laws. The bundle contains:
-
210 job description in word format
-
Disaster Recovery Template which is
Sarbanes Oxley compliant
-
Security Template which is Sarbanes
Oxley compliant
-
IT Service Management Template (Change
Management, Help Desk, and Service Requests)
-
Sensitive Information Policy (Protect
Credit Card Card and Personal Information)
-
Disk Monitor software
-
Metrics for Internet and IT (metric kit)
-
Service Level Policy Agreement Policy
Template (metric kit)
The advanced version of this bundle come
with metrics and a service level agreement template.
Sensitive Information Policy Template
This policy is easily modified and defines how to treat Credit Card,
Social Security, Employee, and Customer Data. The template is 22
pages in length and complies with Sarbanes Oxley Section 404,
ISO27000 (formerly ISO17799), PCI and HIPAA.
This policy applies to the entire enterprise, its vendors, its
suppliers (including outsourcers) and co-location providers and
facilities regardless of the methods used to store and retrieve
sensitive information (e.g. online processing, outsourced to a third
party, Internet, Intranet or swipe terminals).
The HIPAA Audit Program Guide provides you with a checklist of the
must be implemented items which HIPAA mandates.
|
