Compliance, Privacy, and Security are notably different. What does each of these include? Who in the organization is responsible for administering each of these? What regulations might apply to each?

Compliance is ensuring that an organization understands and obeys security procedures and regulations in place. All members of an organization are responsible for administering compliance to guarantee that guidelines are being followed. Privacy is securing information and protecting data. HIPAA (Health Insurance Portability and Accountability) is a big part of privacy as well. Security administrators are responsible for administering privacy in an organization because they monitor and analyze everything in the network and report suspicious activity. They also prevent and deter attacks from happening. When analyzing security, you have to entail the C-I-A triad. The three tenets of information security are confidentiality, integrity, and availability. Confidentiality is the assurance that information cannot be accessed or viewed by unauthorized users, integrity is the assurance that information cannot be changed by unauthorized users, and availability is the assurance that information is available to authorized users in an acceptable time frame when the information is requested. (Solomon, 2021) Everyone in an organization is in a sense responsible for security because it is everyone’s duty to ensure smooth operations within an organization. Everyone has a role and must play their part. For privacy and security, the excerpts of names, DOB (date of birth) and telephone numbers may be regulations applied. As for compliance, regular updates of software and mandatory trainings may be regulations.

 

 

 

Solomon, Michael G. (2021). Security Strategies For Windows Platforms & Applications.