Discussion 1 - The Scope of an IT Compliance Audit

Discussion #1

The Scope of an IT Compliance Audit

300 word response 1 reference/intext citation 

Under the HIPAA Security Rule, it is a requirement for a health care organization to have a security incident response plan and team to handle potential security incidents and breaches. Why is this a requirement?

Auditing Standards and Frameworks

300 word response 1 reference/intext citation  

Access the websites of the Department of Defense (DoD)’s Defense Information Systems Agency (DISA), National Institute of Standards and Technology (NIST), and Information Assurance Support Environment (IASE). Provide examples of the security and auditing frameworks as well as security guidelines and best practices found on these sites.