1. Choose an organization you are familiar with, and choose one of the legal and regulatory requirements. Briefly explain the requirement. Why is it of specific importance to the organization you chose? What are the risks associated with non-compliance?
Legal and regulatory requirements: choose one: Health Insurance Portability and Accountability Act (HIPAA) of 1996. HIPAA Financial Services Modernization Act of 1999, better known as the Gramm-Leach-Bliley Act Public Company Accounting Reform and Investor Protection Act of 2002, better known as the Sarbanes-Oxley Act Your response should be at least 200 words in length.
2. Name and define an information systems control. Provide an example including how it might be used in an organization.