The agency's staff decided against recommending an enforcement action after Kraft, based in Northfield, Ill., described its efforts to assure compliance to securities laws, Kraft's general counsel, Marc Firestone, said in a statement.
This helps in mitigating the threats of data leakage by minimising data exposure due to the incorrect specification of the security policies, such as unauthorised access, non-compliance to security policy, and the misuse of data by authorised consumers.
This is already known from traditional IT outsourcing and providers try to establish trust to customers by proving their compliance to IT security standards like ISO27001 or ISO9001.
Recently, the CSA has put forward the idea of a three-levelled certification scheme that would rely on the compliance to its set of security guidance and control objectives [16 18, 46].
"When the original design point is about security and compliance to some of the strictest standards set by governments on financial services, that's no comparison to companies adding security on as an after fact," Wang said.
It includes agreements regarding the quality of service attributes, pricing, compliance to regulation, level of support, security and privacy guarantees, and others.
And as we all know, "Compliance does not equate to Security".
Prior to joining Yahoo, Lord was the CISO of Rapid 7 and was the first-ever security hire at Twitter, where he formed Twitter's approach to security and compliance.
This option is however, unacceptable for many organisations who due to compliance, legal, security or other reasons require that their monitoring system be behind their firewall.
The algebraic reasoning with the processes can be used to verify the design and to provide a mechanism for controlling run-time to maintain compliance and security [27].
