1. Unlike security frameworks, regulations are not mandatory

Select one:

True

False

2.

Which of the following is NOT a regulation?

Select one:

a. Federal Cybersecurity Act of 2000

b. ISO 27001

c. 23 NYCRR 500

d. Health Information Portability and Accountability Act

3.

A company that processes insurance payments for a doctors office most likely has to comply with:

Select one:

a. PCI

b. HIPAA as a business associate

c. 23 NYCRR 500

d. GLBA