Take the 2-minute tour ×  What technologies, processes, or laws
that relate to InfoSec apply specifically to the Financial
industry?  If you're familliar with the Financial Industry, can
you share details? For example:    • What are specifics on
common controls    • What technology (or widely deployed
product) satisfies a particular control  share|improve this
question  5 Answers 5  up vote 10 down vote accepted  As
mentioned the two main laws in the US are Sarbanes-Oxley Act
(SOx) and the Gramm-Leach-Bliley Act (GLB).  If you are on the
Banking side of the Financial Services sector then a must read
is the Federal Financial Institutions Examination Council
(FFIEC) Information Security Booklet dated July 2006.  The
handbook references NIST, ISO, and COBIT. NIST's 800 series
documents are an excellant source of guidance on a variety of
topics. On the ISO side see the ISO/IEC 27002 standard.  If you
fall under SOx then you will probably find yourself involved
with two control frameworks, COBIT and COSO. The cont