is the ACAP System Standard-of-Care defense or the “Safe Harbor” defense and how is compliance measured or established?
The ACAP System Standard-of-Care defense is one of the potential means of avoiding liability for the losses suffered by the damaged-victims of a cyber-crime attack. The defense is obtained by an organization meeting or exceeding the duty-of-due-care or the standard-of-care in the cyber-security of sensitive, confidential and trade secret information, defined as protected information, as established by the Federal Information Security Management Act (FISMA). The ACAP System provides an organization with the guidance and capabilities to facilitate compliance with FISMA and thereby the “safe harbor” from liability which compliance creates. Compliance can be determined or measured by many means. The ACAP aScore service is possibly the most efficient. It provides upon demand an aScore measurement which numerically measures an organization’s compliance with the standard-of-care requirements established by FISMA. To determine this compliance value it utilizes information which the organizatio
Related Questions
- is the ACAP System Assumption-of-the-Risk defense or the "Risk Diversion" defense and how is compliance measured or established?
- What is the Defense Enrollment Eligibility Reporting System (DEERS) and where can I find more information regarding DEERS?
- is the ACAP System Standard-of-Care defense or the "Safe Harbor" defense and how is compliance measured or established?