Karl Woodard
Aug. 20, 2015
Security for Web Applications and Social Networking
Week 3 Lab 2 Assessment

1. With what section of SOX would the IT professional deal the most, and why? Section 404, because it stated the responsibility of management for establishing and maintaining an adequate internal control structure and procedures for financial reporting. 2. Under HIPAA, when is a health care provider required to notify all patients and the Department of Health and Human Services when a security breach is discovered? These individual notifications must be provided without unreasonable delay and in no case later than 60 days. 3. Which database is more secure: the Java-based Apache Derby or MySQL? The Java-based Apache Derby 4. Which types of businesses or entities are governed by HIPAA? * Health Care Provider * Health Plan * Health Care Clearing house 5. According to the PCI Quick Reference guide, who must comply with PCI-DSS standards? All the big card brands have to be complying with PCI-DSS standards. 6. What are the 11 titles of mandates and requirements for SOX compliance? * Public Company Accounting Oversight Board (PCAOB) * Auditor Independence * Corporate Responsibility * Enhanced Financial Disclosures * Analyst Conflicts of Interest * Commission Resources and Authority * Studies and Reports * Corporate and Criminal Fraud Accountability * White Collar Crime Penalty Enhancement * Corporate Tax Returns * Corporate Fraud Accountability 7. What purpose may COBIT serve to help comply with regulations such as Sarbanes-Oxley? The purpose for COBIT was to provide comply for IT Infrastructure library. 8. What is RDP? What port number does it use? RDP is Remote Desktop and it uses port 3389.