When developing a security policy framework for XYZ Health Care Organization it’s important to understand guidelines needed to establish an effective policy. Such guidelines like Health Insurance Portability and Accountability Act (HIPPA), and The Sarbanes–Oxley Act (SOX) must be included and followed to the letter. This will eliminate nearly all guesswork and fill in the blanks where HIPAA and SOX do not. Finally, while following these set ground rules it is also important to understand that this framework must fit the description laid out by the Confidentiality, integrity and availability CIA triad. There is a growing need to fill gaps which are left by the guidelines from HIPAA, SOX and the CIA triad. As the laws that govern those are
