Aspects of compliance with regulations, standards, laws, and policies.

learn more… | top users | synonyms

6
votes
1answer
160 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
6
votes
1answer
173 views

Possible for Lync (Skype for Business) to adopt Activesync-style policies?

My compliance manager recently told me that Lync IMs should be treated as e-mail for compliance purposes. This also made me realize that our other email policies (encrypted device, pin required, etc)...
1
vote
0answers
48 views

Does HDCP impose HD-playback restrictions for sinks?

In order to be HDCP compliant, a source can only output HDCP-encrypted digital HD content. However, is the opposite true for HDCP sinks? In order to be HDCP compliant, should a sink only accept to ...
0
votes
0answers
29 views

Proper way to document and log brute force attacks when creating a user account

We have the following use case: Users can self register for a business account by filling a validation form with their ID, first name, last name, and DOB. ID is something that only the user knows ...
0
votes
0answers
19 views

Signature algorithm with ECDH ? can we use RSA or ECDSA ? or ECDSA is compulsory?

I am going through RFC 5656. I want to know if ECDH with RSA is allowed? (I am not SSH ECC compliant).
0
votes
0answers
74 views

XCCDF check with SCE - Suse Linux Enterprise Server 11

I have written some compliance checks for Red Hat based systems with XCCDF. Some of my checks are OVAL definitions others are shell-scripts. It works great. The same checks don't work on an SLES 11 ...
0
votes
0answers
46 views

Compliant login process

Working with a developer to update a login system through a web-UI: Currently, we use: Enter login ID Goes through Challenge/Step-up Based on results: Challenge/Step-up User is presented the ...