Information Security Program Regulation

This regulation, Army Regulation AR 380-5 Security: Army Information Security Program October 2019, establishes Department of the Army (DA) policy for the classification, downgrading, declassification, transmission, transportation, and safeguarding of information requiring protection in the interests of national security. It primarily pertains to classified national security information, or classified information, but also addresses controlled un-classified information (CUI). For purposes of this regulation, classified national security information, or classified information, is defined as information and/or material that has been determined, pursuant to Executive Order (EO) 13526, or any applicable predecessor order, to require protection against unauthorized disclosure and is marked to indicate its appropriate classification. This regulation implements Executive Order 13526 and Department of Defense Manual (DODM) 5200.01, Volumes 1 through 4. This regulation also establishes policy on the safeguards of restricted data (RD) and formerly restricted data (FRD), as specified by the Atomic Energy Act of 1954, as amended.

Sets forth regulations for the entire U.S. Defense Dept. relating to the protection and disclosure of national security information.

Implementing Information Security in Healthcare: Building a Security Program offers a critical and comprehensive look at healthcare security concerns in an era of powerful computer technology, increased mobility, and complex regulations designed to protect personal information. Featuring perspectives from more than two dozen security experts, the book explores the tools and policies healthcare organizations need to build an effective and compliant security program. Topics include information security frameworks, risk analysis, senior management oversight and involvement, regulations, security policy development, access control, network security, encryption, mobile device management, disaster recovery, and more. Information security is a concept that has never been more important to healthcare as it is today. Special features include appendices outlining potential impacts of security objectives, technical security features by regulatory bodies (FISMA, HIPAA, PCI DSS and ISO 27000), common technical security features, and a sample risk rating chart.