Public Companies and many vertical industries are affected by Public Laws, Directives and Regulations; these emerging requirements are driving current day IT Security Governance, Risk Management, Audit and Compliance (GRC) efforts.
| Healthcare has emerging IT requirements affecting IT Security:
|
 |
| Federal Government Organizations have several IT requirements requiring IT Security improvements for agency and contracted systems:
|  |
| Financial institutions have security and privacy requirements enacted by public laws and regulations:
|  |
| Publicly traded companies are required by law to comply with the Sarbanes-Oxley Act (SOX) of 2002; it was enacted to increase regulatory visibility and accountability of public companies.
|  |
| The North American Electric Reliability Council (NERC) has issued eight reliability standards on cyber security requirements:
|  |
| The Department of Defense (DOD) has adopted DOD Information Assurance Certification and Accreditation Process (DIACAP):
|  |
|
