SLAC Computer Security		Search SLAC
SLAC Home | Computing Home | Computing Outages | Help

Cyber Security Awareness Month

These tips are part of a month long effort to distribute useful computer security information to the SLAC community.

Day 31 - Legal Awareness (Regulatory, Statutory, etc.)

Internet Storm Center handlers put out this message: Scary stuff! Well for me anyways. As a security geek with a technical background the legal, regulatory, privacy, and liability issues revolving around Information Security are quite daunting. They speak a different language and have completely different concerns. For todays tips can you let us know what are the issues you are facing? Which laws or regulatory compliance are you facing? How are you dealing with them? Are they distracting you from doing actual security work? Are you dealing with attempting compliance with conflicting and vaguely worded interpretations of statutes and industry regulatory bodies? However, they didn't get any responses back from the ISC community! People are too scared to even respond? Too confused to know what the laws and regulations are? Who knows. Here at SLAC we rely on the expertise of our in-house Counsel for guidance. Several departments also get guidance memo's direct from DOE and Office of Science. If you are unsure about whether something is allowed or not please seek guidance and don't assume.