The Two Sides of ROI: Return on Investment vs. Risk of Incarceration

摘要

It wasn't that long ago that IT security was viewed by CEOs and CFOs as an avoidable, low-priority expense. Many organizations charged into the new millennium with those lingering thoughts. However, Congress and the courts are forcing IT executives to reconsider, with major motivation provided by three pieces of legislation: 1. The Health Insurance Portability and Accountability Act of 1996 (aka HIPAA), affecting privacy/health care industry; 2. The Gramm-Leach-Bliley Act of 1999 (aka GLB), affecting privacy and security of nonpublic personal information/banking, securities, and insurance industries; and 3. The Sarbanes-Oxley Act of 2002 (aka SOX), affecting accountability/business.