Legal Reg, Compliance, Invest - Practical Connection Assignment

University of the Cumberlands

Meeting your commitments is about something other than obeying laws. It guarantees that there is uprightness in the financial market. This gives businesses and shoppers some assurance and certainty realizing that they can lead business in a reasonable and straightforward market. With regards to a business and corporate administration, compliance alludes to the organization complying with the majority of the legal aspects concerning how they deal with the business, their staff, and their treatment towards their customers. The idea of compliance is to ensure that organizations demonstration dependably.

Every organization must follow legal Laws and Compliance. The company I work for is an Insurance industry, where confidentiality is one of the main factors. Maintaining customer data privacy is one of the most important objectives of the Company. Using a structured and documented program to follow Legal regulations and compliance helps the entire company follow the same rules and prevent legal issues with customers and other business partners like lawsuits.

All this is possible by firstly identifying the privacy data and creating an IT Infrastructure where the Customer’s private data can be protected. In our company, we override all the Customer’s private data like Social Securities, Tax ID’s, Phone numbers, email addresses in all non-production environment so that the private data cannot be misused even internally. This is part of an automated process. This course has helped me understand the importance of such activities to maintain a successful business model.

Some examples of the laws and codes my Company follows are The Texas Insurance code, Texas Security Breach law etc. Complying with such laws ensures that the different teams of the company are on the same page when it comes to information security and data privacy. In my company there is a mandatory compliance training that every employee has to go through in which everything from work ethics to data privacy, password protection to IT practices everything is taught, and documentation is provided.

I have gone through all the legal and Compliance documentations of our Company after taking this course which helped me get a better understanding of the use, requirement and results of applying such rules.

All the records are transferred between the authorized personnel and the company electronically. So, having a good firewall for network security to avoid security breaches is highly required. With todays fast growing technology, we at our company check for the firewall settings and upgrade it periodically. We have also started to encrypt all the Production back ups and override all the required info in the copies that are provided within the IT department for internal use and assess test cases as part of security measure.

Physical security is an important factor for every organization. We get a Physical security assessment often to adopt new techniques to protect the facility and employees from any threat. As part of that, we have limited the use of the exits in our facility and limited the use of the main entrance only to outsiders so that the receptionists can get correct information and reason for visit from the visitors. This can reduce intrusion threat. All the employees also get in-class training about Behavior during an Intrusion. The “Run, Hide and Fight” techniques have been discussed and explained so that the right choice can be made in a given situation if need be.

I got the best understanding of different aspects of my organization because of this course. Maintaining and protecting privacy and protecting ones selves are the most important things to do as a responsible employee of any organization.