Regulatory Compliance

Compliance is a set of requirements that organizations must enforce to ensure that employees are aware of and take steps to comply with relevant laws and regulations, as mandated by related industry committees and government institutions. Compliance is not a one-time process, it's a set of never-ending ongoing activities that ensure continuous compliance at every point in time.

All regulations have differences, but most of them have common structure:

• Assessment of security risks;
• Implementation of security measures;
• Monitoring of implemented measures;
• Accountability ("auditability") and reporting.

NetWrix provides innovative solutions that help organizations streamline their adherence to compliance regulations, such as SOX, HIPAA, GLBA, PCI, FISMA, and others, while increasing the overall operational efficiency and minimizing reliance on routine and error-prone manual processes.

Quick summary of compliance regulations covered by NetWrix compliance suite:

Regulation	Goal	Who Must Comply?
FISMA (Federal Information Security Management Act)	Maintain information security for all records and information systems that support the operations and assets of federal agencies [FISMA Solution...]	All federal organizations.
GLBA (Gramm-Leach-Bliley Act)	Protection of privacy of customer financial data [GLBA Solution...]	All financial organizations (banks, credit unions, mutual funds, etc).
HIPAA (Health Insurance Portability and Accountability Act)	Security and privacy of patient data to guarantee non-disclosure of protected health information [HIPAA Solution...]	Healthcare organizations (covered entities) and their business associates (e.g. billing agencies).
PCI (Payment Card Industry)	Protection of cardholder data and private information [PCI Solution...]	All organizations that store and transmit credit card data and billing information.
SOX (Sarbanes Oxley Act)	Transparency and accountability of public companies for investor protection [SOX Solution...]	All publicly traded companies on U.S. stock exchanges (including non-US companies traded in US and overseas divisions of US companies).

Disclaimer: This information is not intended to provide legal advice or substitute for the advice of an attorney.