It is widely regarded that past CISSP tests would require knowledge
of many US ciber crime laws. These would include the following:
- The Privacy Act of 1974
- Computer Fraud and Abuse Act of 1984 (and related amendments)
- Computer Security Act of 1987 (perhaps GISRA - 2000 and FISMA 2003)
- Electronic Communications Privacy Act (1986)
- HIPAA (1996)
- GLBA (1999)
- Children's Online Privacy Protection Act (COPPA) (1998)
- Family Educational Rights and Privacy Act
- USA Patriot Act
However, we all know that the ISC2 is hoping to make the CISSP test
much more international. There first attempt at this was rather lame
as seen in the recent CBK outline that stated that we should all
know international laws such as EU law, Muslim Law, etc. This was a
lame attempt since it gave no practical advice on "what" we would
need to know about these different legal codes.
I believe the latest attempt is the best yet (as seen in the CISSP
survey sent out last week). In this survey ISC2 revealed an actual
outline for what we need to know about international laws. These are
more concepts than actual laws and include the following:
- different rules of evidence
- difference rule regarding IP (know US IP laws vs. WIPO laws
- "trans-border information flow" (makes drawing lines difficult)
- exportation restrictions (regarding encryption)
- different rules and definitions of fraud
I know this may not narrow down your studying, but perhaps it will
open a thread of discussion where others can add to the info
provided above.
Regards,
Doug Landoll, CISSP, CISA
President, Veridyn Inc.
(512) 310-2228
-
--- In CISSP-Discuss@yahoogroups.com, "Nadeem Rafi" <nrafi@j...>
wrote:
Dear All,
Can any one provide information about CISSP domain "Laws and
Ethics", is it necessary to know about USA specific laws as being
non-usa related. If not then please let me know which laws are
expected to be on the list and if unfortunately yes, then what
are "those USA specific" laws which we have to study.
Best Regards,
Nadeem Rafi
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/CISSP-Discuss/
<*> To unsubscribe from this group, send an email to:
CISSP-Discuss-unsubscribe@yahoogroups.com
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
