There's a few very popular regulations, HIPAA, SOX, PCI-DSS, PII, ITAR, GLBA.
Can anyone explain what are their exact security implications? Exactly what type of implementations would my organization has to do in order to be compliant?
In this question, I don't care about keeping data preserved (backups, etc), just interested in the security side of things.
Are these regulations requiring firewalls? pen-tests? encryption? all of the above? something else?
A summary would be very informative. It would take a long time for me to read the details and get the specifics on my own.