The Compliance Authority Synopses

Would Your Records Keeping Practices Pass The Test? – By Bob Larrivee, Director & Industry Analyst for AIIM

This is a question every organization should ask and be prepared to defend. A recent article presented by the Associated Press titled “SF drug cases at risk amid crime lab questions”, cites that one of the elements in question as a result of an audit by the American Society of Crime Laboratory Directors is the lack detailed record-keeping for cases. While this is not the only element placing these cases at risk, it is significant enough to be cited which in my view is severe.

Click here to read the rest of the article.....

Massachusetts MA 201 CMR 17.00 – Best Practice Guidance on How to Comply

Integration and automation of IT-GRC with Security: Why is there a need and why is it the next big thing? Why should customers buy? ROI of integrating Security and IT-GRC

MA 201 CMR 17.00 has been in the news for the last 18 months. Whilst no one was sure when it would come into effect, it has now been confirmed that the Massachusetts information security regulations, entitled “Standards for the Protection of Personal Information of Residents of the Commonwealth,” also known as “MA 201.17”will take effect on March 1, 2010. The regulations apply to entities that own or license personal information about Massachusetts residents. It is important to note that rules apply to all entities, wherever located, with “personal information” of Massachusetts residents.

Click here to read the rest of the article.....

If you would like to be removed from The Compliance Authority's weekly email distribution, please reply to this email with REMOVE in the subject line.