Re: laws/regulations to comply with

["Stanclift, Michael" <michael.stanclift () ROCKHURST EDU>]

I would be very interested in this as well. I'm in the process of developing backup/recovery documentation/policy and 
have started wondering the same thing about general network policy myself.

Jason -- If you find anything MO specific, let me know.

Michael Stanclift
Network Analyst
Rockhurst University

http://help.rockhurst.edu
(816) 501-4231


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Youngquist, Jason R.
Sent: Thursday, December 04, 2008 9:34 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] laws/regulations to comply with

We are working on writing more formalized policies for the institution.  What I'm looking for is a comprehensive set of 
law/regulations that an institution such as a college might need to comply with.  For example, HIPPA, PCI, Red Flag, 
FERPA, GLBA, CALEA, state & federal laws, etc.  Is there any definitive list somewhere or does anyone have any 
additional suggestions?


Thanks.
Jason Youngquist
Information Technology Security Engineer
Technology Services
Columbia College
1001 Rogers Street, Columbia, MO  65216
(573) 875-7334
jryoungquist () ccis edu
http://www.ccis.edu