Federal Information Security Law

Abstract

The American legal system, along with many of its counterparts around the globe, is only beginning to grapple with the legal challenges of the information age. The past decade has witnessed a multitude of new laws and regulations seeking to address these challenges and provide a common framework for the legal and technical professions. Those charged with information security responsibilities face a myriad of complex and often vague requirements. In this article, we establish a four-level taxonomy for federal information security laws and explore the major components of each level.