Print
What is “information security law”?
April 17, 2009 – 7:02 am by Lance Michalson
Information security law is an emerging area of the law which is currently at the same stage of development as so-called “Internet law” or “cyber law” was at in the early 21st century.
There is no single law in South Africa that governs all of a company’s information security obligations. Rather, it comprises a ‘patchwork’ of different laws, and even standards and best practices.
The patchwork comprises the following areas of law:
- Transactional security: where section 43 (5) of the ECT Act requires the use of a payment system which is “sufficiently secure”.
- Corporate Governance: where King II requires appropriate information security controls to protect companies and their shareholders.
- Electronic signutures: where ordinary electronic signatures and “advanced” electronic signatures play a role in securing information pursuant to sections 13 of the ECT Act. The rest of this article is only available to a registered user with one of the following subscriptions: Trial, Client, Student, Subscriber. To continue reading this article, please either:
- Subscribe - unlimited access for R495 per month per subscriber. It's quick and easy, and you can unsubscribe at any time. Find out more about the benefits of subscribing. Why you should pay for the content. Subscribe Now.
- Register - limited access for FREE, and without obligation. It's quick and easy to get greater access instantly. Select "Free Account" under the Subscription Options. [ Register ]
Similar:
- Top Privacy Risks
- What is information security?
- Infosec - what are we trying to protect?
- Infosec versus other concepts (e.g hacking)
- How does the law recognise or define digital or e-signatures?
You must be logged in to post a comment.