Re: Federal laws applicable to Universities

["Khan, Sam" <Sam_Khan () OUS EDU>]

Carlos Lobato, the IT Compliance Officer at New Mexico State University, developed a nice IT Compliance Regulations 
Matrix that you may find helpful:

http://compliance.ict.nmsu.edu/files/2013/08/Updated-IT-Framework-Tables04032013.pdf


Sam Khan
Internal Auditor
Oregon University System
(541) 737-7336


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Francisco Pérez
Sent: Thursday, November 07, 2013 1:11 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Federal laws applicable to Universities

Thank you very much for your quick response!

--Francisco

On Thu, Nov 7, 2013 at 4:58 PM, Michael Cole <mcole () clarku edu<mailto:mcole () clarku edu>> wrote:
I'd add these 2 to your list as well.

HEOA

http://www.educause.edu/library/higher-education-opportunity-act-heoa

DMCA

http://www.copyright.gov/legislation/dmca.pdf

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>] On Behalf Of Francisco Pérez
Sent: Thursday, November 07, 2013 3:44 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Federal laws applicable to Universities

I know that FERPA, HIPAA( if healthcare data) and maybe PCI are applicable to Universities on the US. But there is any 
other federal laws applicable or that Universities need to comply with?. Just working on fundamental laws for IT 
Compliance on Universities.

Will appreciate your comments.

--
Francisco Pérez
Information System Office
UPR-Medical Sciences Campus
francisco.perez12 () upr edu<mailto:francisco.perez12 () upr edu>
www.rcm.upr.edu<http://www.rcm.upr.edu/>

Confidentiality Notice: Any use, review, distribution or copying of this communication by anyone other than the named 
recipient(s) is strictly prohibited. Please notify the sender immediately by e-mail if you have received this e-mail by 
error and delete this e-mail from your system.

Please print this email only when necessary.