A Compliance Primer for IT Professionals

This paper is from the SANS Institute Reading Room site. Reposting is not permitted without express written permission. A Compliance Primer for IT Professionals Regulations abound and the acronyms are endless. After suffering seemingly endless confusion, I set about in this paper to document the basics of each of the major compliance regulations, to whom they apply, a list of audit frameworks, key IT requirements, and links to best practices and relevant sites. Summary tables are provided up front to condense the bulk of the information into an easily digestible read, with baseline common requirements and reports following. Links to control frameworks, best practices, suppo..