12. Importance of Governance Elements

We can understand that the governance or country rules can affect the company if not followed properly, the knowledge of the policy is important, if not followed it could put the organisation at stake, like for example:

• We must follow the rules of GDPR (general data protection regulation) which affords data protection and control to individuals within the territorial boundaries of the EU regardless of citizenship.
• Health care insurance, Portability and Accountability Act o 1996 HIPA and must be closely guarded from the information security perspective.
• ISO (International Organization for Standardization) is an international standards body. One of the standards that publishes how to destroy data in a secure fashion.