OCEG Online

Fair and Accurate Credit Transactions Act Disposal Rule

Fair Credit Reporting Act

Health Insurance Portability and Accountability Act of 1996 (HIPAA)

Health Insurance Portability and Accountability Act

Crisis Management and Response

E-Discovery

Foundation - The OCEG Red Book & GRC

General U.S. Employment

Governance

Information Privacy

Information Security

OCEG Illustrated Series

Pharmaceutical

EDD Update

AGREEMENT between the European Union and the United States of America on the processing and transfer of Passenger Name Record (PNR) data by air carriers to the United States Department of Homeland Security (DHS) (2007 PNR Agreement)

Alan Calder on IT Governance, information security and ISO 27001

An Introduction to IT Governance (Paisley, 2006)

Analysis: Court Nixes Patriot Act Subpoena (September 7, 2007)

Annual Survey of Electronic Discovery - Symposium Issue (2006-2007)

ANSI, Identity Theft Prevention and Identity Management Standards Panel

Ask the Auditor: Who is Responsible for Information Security? (2008)

Assessing, Managing Enterprise Risk: What it takes to mange virtual servers (2007)

Australia Office of the Privacy Commissioner

Australia, Federal Privacy Act Page

Authenticity and Management of Electronic Records (2007)

beSpacific - Daily law and technology news

Beyond the Password: Tackling the challenge of data security for the global supply chain (2007)

Board Oversight of Information Technology - Data Privacy and Data Security: The New Imperative (2007)

California, Electronic Discovery: Legislation and Rules (2008)

California, Recommended Practices on Notice of Security Breach Involving Personal Information (2007)

Christiansen's IT Law: Information Law Theory and Practice

Compliance and Security Connection

Compliance Provides Benefits Beyond The Obvious (2007)

Computer Technology Review

CongressLine - The EU Privacy Protection Directive and the U.S. Safe Harbor (2000)

Convergence of Physical and Information Security in the Context of Enterprise Risk Management, The (2007)

Court finalises e-discovery rules (2007)

Current Listing of States That Have Enacted E-Discovery Rules (2008)

Daily Tech

Data Auditing Blog

Data Security Breaches: Context and Incident Summaries (CRS, May 7, 2007)

Datakos Blawg, The - Rick Wolf

Decisions Up Stakes for Managing EDD (2008)

Develop Effective Archive Policies Before FRCP Compliance Becomes a Problem (2008)

DHS, Privacy Impact Assessment for the Department of Homeland Security General Contact Lists (2007)

DiscoveryResources.org: Electronic Discovery News

DOJ, Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations (2002, with updates)

Early Warning Signs of IT Project Failure: The Dominant Dozen (2006)

Easing e-discovery preparation by mapping enterprise data (2008)

EDD Update

E-Discovery Mistakes Might Kill Your Case (2008)

E-discovery product purchase considerations (2008)

E-Discovery Requests: Know Your Limits (2007)

Electronic Discovery Case Database

Electronic Files Are Fair Game in Discovery Phase (2007)

Enterprise Data Classification: A Distributed Problem Requires a Distributed Solution (2007)

EPIC's International Data Retention Page

EU, Promoting data protection by privacy-enhancing technologies (PETS)

EU/UK, Data Retention (EC Directive) Regulations 2007

European Commission: Proposed revision of the Directive on electronic data protection (2007)

European Parliament: Webpage on the legislative procedure on the Directive on electronic data protection

Examining E-Discovery Chain of Custody (2007)

FAQ: Changes to the Federal Rules of Civil Procedure Affect Storage Plans (2007)

Financial Privacy Rule: Interagency Notice Research Project - Proposed Rules (March 2007)

FTC, Financial Privacy Rule: Interagency Notice Research Project Home Page

FTC, Privacy Initiatives Home Page

FTC’s Website Privacy and Security Rules for Every Business, The (2007)

Global Best Practices in Email Security, Privacy and Compliance (2008)

Governing for Enterprise Security Implementation Guide (GES)

GRC Issues, Professional Blogs

Group creates standard to ease e-discovery data transfer (2007)

Guide to NIST Information Security Documents

How to create an e-discovery employee awareness program (2008)

How to educate your workforce on the new federal rules regulating electronic discovery

How Vulnerable Is Your Information Technology? (2006)

In Re Discovery

Information Governance Engagement Area

Information Security and Data Breach Notification Safeguards (CRS, July 31, 2007)

Instant Messages: An E-Discovery Nightmare? (2007)

Insurers Taking Stock of E-Discovery Costs (August 2007)

Integrate Archiving with Disaster-Recovery Plan (2007)

Internet Law: How to Transfer Electronic Personal Data from Europe to the United States

ISO27001 - the Information Security Management Standard

IT Governance Defined

IT Security Portal

IT Sentinel (UK)

Judicial Council proposes new electronic discovery rules (2008)

Keeping Up With EDD Blogs and Tools (2007)

Legally, what constitutes an 'original' e-mail? (2007)

Leveraging Content Management Systems for e-Discovery (August 2007)

Meeting Compliance and Privacy Requirements - The Case for Electronic Distribution (2007)

New Federal Rules on E-Discovery: The First 180 Days (July 2007)

Next Up, E-discovery Challenges: Amended litigation rules force governments to rethink their electronic document options (August 2007)

NIST, ITL Security Bulletins

NIST, Managing Risk from Information Systems, Initial Public Draft (October 2007)

OCEG Critical Conversations Series: CIO at the Center

OCEG Practice Aid: Privacy - State Laws Regarding Notice of Breach of Data Security

Personal data is not a bar to FOI disclosure, rules European court (2007)

Portable security: Full-disk encryption can take a lot of risk out of mobile computing (2007)

LRN