2012 cbk ethics

feb4cissp

Dear Friends,

sorry to ask this question as per latest cbk 2012 laws are removed

do we need to study any laws? (sarbanese oxley,fraud,hippa...etc)

i know for sure common law, civil .. etc will be there


Thanks
Ken

swild

You should know what SOx, HIPPA, HITECH, TEMPEST, FFIEC, PCI-DSS, GLBA, etc. stand for and basicly what they are, i.e. PCI-DSS is credit card processing security standards. You don't need details, just a basic understanding of what environments they are used in.

JDMurray

If you are taking the CISSP exam in a country other than the USA, you will most likely not need to know anything about specific US laws and regulations regarding information privacy and security. However, it is possible that you will need to know facts about legal systems commonly found across the globe, such as common law and civil law.

The new CBT venue for (ISC)2 exams has made it possible to place region-specific items on exams, but I don't know if the (ISC)2 is doing this (yet).