Regulations and compliance
Industry and regulatory compliance standards help protect computing assets from various security vulnerabilities and misconfiguration, and minimize the risk in various execution environments, such as development, test, and production.
There are different standards such as the following:
- Payment Card Industry (PCI): https://www.pcisecuritystandards.org/
- Health Insurance Portability and Accountability Act (HIPAA): http://www.hhs.gov/ocr/privacy/
- Federal Information Security Management Act (FISMA): http://csrc.nist.gov/groups/SMA/fisma/faqs.html
- Department of Defense Information Assurance Certification and Accreditation Process (DIACAP): http://www.diacap.net/
- Federal Risk Authorization Management Program (FedRAMP): https://www.fedramp.gov/
- Gramm Leach Bliley Act (GLBA): https://en.wikipedia.org/wiki/Gramm–Leach–Bliley_Act
The VMware Compliance Reference Architecture Framework and the Secure and Compliance Capable Platform help customers to improve their security and IT...