Reference no: EM133478978

Both the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA) contain numerous provisions that an organization that is subject to the legislation must follow. In some instances, an organization will have business activities that place its information technology systems under the regulatory requirement of both laws. Both GLBA and HIPAA require subject organizations to create written information security plans/policies for their IT operations and provide employee training on each law's regulatory requirements.

1. Which law gives an organization more instruction and insight into the type of information security plans/policies required?

2. Which law gives better instruction and insight into training practices?

3. How would you advise an organization that has to follow both laws on its information security plans/policies activities and training activities?

4. Why would you advise that course of action?