Information Management | by OCEG the Open Compliance and Ethics Group

Asia

Supply Chain Dynamics in Asia (2010)

Canada

Canada, Office of the Privacy Commissioner

Latin America, Multinational

Managing Data in Latin America (2007)

Multinational

International Association of Privacy Professionals (IAPP)

Western Hemisphere Data Protection Laws (2010)

International Privacy and Data Protection Laws (2008)

Restrictions and solutions to transfers of personal data within the European Union and from the European Economic Area to other countries (2008 Ed.)

European Data Protection Digest (IAPP)

International Data Protection and Privacy Law (2009)

Secure Collaborative Supply Chain Planning and Inverse Optimization – The JELS Model (2010)

A Field Research Study of Researchers’ Perspectives on Supply Chain Risk Management (2010)

Which is Better: Outsourcing or Shared Services? (Deloitte, 2010)

Making compliance real for those in the trenches (2010)

High Performers and Foundational Controls: Building a Strategy for Security and Risk Management (January 2011)

Regulatory Intelligence by Michael Rasmussen: an Axentis Thought Leadership White Paper

Multinational, European Union

EU 1995 Data Protection Directive

EU, Working Document: Transfers of personal data to third countries: Applying Article 26 (2) of the EU Data Protection Directive to Binding Corporate Rules for International Data Transfers (2003)

Multinational, United States

Global Privacy Handbook (2008 Ed.)

Australia

ALRC Discussion Paper 72: Review of Australian Privacy Law

Europe, European Union

European Data Protection Law: Corporate Compliance and Regulation (Oxford University Press, April 2008)

After the deadline: a status review of the implementation of the new European cookies rules (2011)

United States

HHS, Office for Civil Rights: Health Information Privacy

Business.Gov: Computer and Information Security

45 CFR Part 164.500 et seq., Subpart E, Privacy of Individually Identifiable Health Information (As amended)

Title 29 U.S. Code § 211- Collection of data

Title 29 U.S. Code § 211- Collection of data

Supply Chain Risk: Deal With It (2003)

New Face of Supply Chain Certification, The

Goal of the Lean Supply Chain: Seven steps to building a lean supply chain (2007)

Are the basics under control? A close look at supply chain management in Asia (2007)

Achieving World-Class Supply Chain Collaboration: Managing the Transformation (2007)

Strengthen Your Supply Chain, Protect Your Brand: Five elements to choosing a supply chain management program (2007)

Viewpoint -- China's Evolving Supply Chain (2007)

Services Supply Chain Management: An Untapped Opportunity (2008)

ABC: An Introduction to Supply Chain Management

Green Supply Chains Need Strategy -- Not Hype (2008)

Global Logistics & Supply Chain Strategies Magazine - SupplyChainBrain.com

Supply Chain Edge Newsletter

Supply Chain Forum: an International Journal

Supply & Demand Chain Executive Magazine

Supply Chain Digest

International Supply Chain Education Alliance (ISCEA)

SCM Pulse (Supply Chain Management)

Global logistics indicators, supply chain metrics, and bilateral trade patterns (2005)

Tranparency in the Supply Chain (June 2007)

Herding Cats Across the Supply Chain

Compliance in the Supply Chain: The Present and Future Implications of Sarbanes-Oxley for UK Businesses (2007)

Plan for E-Discovery Should be in Place Now, A (2007)

eDiscovery for Structured Data

Landmark Federal Discovery Rules Amendments Have Become Effective. Are You Ready? (2006)

Electronic Discovery Institute

NIST: Risk Management Guide for Information Technology Systems (2002)

NIST, International Standard ISO/IEC 17799:2000 Code of Practice for Information Security Management (2002)

NIST, Risk Management Framework

E-Discovery And Records Management: A Risk-Based Approach (July 2007)

Five Steps to Building Information Risk Management Frameworks (August 2007)

GAO, Information Security Risk Assessment: Practices of Leading Organizations (1999)

Convergence of Physical and Information Security in the Context of Enterprise Risk Management, The (2007)

NIST, Federal Information Security Management Act (FISMA) Implementation Project

Creating a Computer Security Incident Response Team: A Process for Getting Started (2002, Last Updated 2006)

Eight easy ways to protect your company data - and reputation (2008)

Beyond the Password: Tackling the challenge of data security for the global supply chain (2007)

Early Warning Signs of IT Project Failure: The Dominant Dozen (2006)

Alan Calder on IT Governance, information security and ISO 27001

Security Matters, Software Engineering Institute, Carnegie Mellon University

IT Sentinel (UK)

Federal Information Security Management Act of 2002

Government of Canada Publications: IT Security Guidance (ITSG)

IT Compliance Institute (ITCi)

Information Security Forum

ISO Catalog Page: Information technology

IT Security Portal

Information Security and Data Breach Notification Safeguards (CRS, Rev January 28, 2010)

DOL - Compliance Assistance, Employee Polygraph Protection Act (EPPA)

DOL - Employment Law Guide, Chapter: Lie Detector Tests

DOL - Fact Sheet #36: Employee Polygraph Protection Act of 1988

FTC - Using Consumer Reports: What Employers Need to Know

DOJ - Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations, Special Case: Workplace Searches

EU, European Commission decision on standard contractual clauses for the transfer of personal data to third countries (December 2004)

HHS, Summary of the HIPAA Privacy Rule

HHS Brochure: Protecting Your Civil Rights in Health Care and Social Services and Your Health Information Privacy Rights

HHS, Fact Sheet: Privacy and Your Health Information

HHS, Fact Sheet: Protecting the Privacy of Patients' Health Information

HHS, The Confidentiality Of Alcohol And Drug Abuse Patient Records Regulation and the HIPAA Privacy Rule: Implications For Alcohol and Substance Abuse Programs

DOC, Safe Harbor Overview

DOC, Safe Harbor Workbook

DOC, Information Required for Safe Harbor Certification

DOC, Safe Harbor Workbook

DOL, Compliance Assistance for Group Health Plans HIPAA and Other Recent Health Care Laws

HHS, Medical Privacy - National Standards to Protect the Privacy of Personal Health Information Regulatory Documents

DOC, Safe Harbor Documents

Privacy Rights of Employees Using Workplace Computers in California (2000)

BLS, Workplace e-mail and Internet use: employees and employers beware (2003)

FEDEE: Guidance note on European HR trends

US/EU Safe Harbor Agreement: What It Is and What It Says About the Future of Cross Border Data Protection (2003)

Sample e-Mail Policy (2007)

Title 18 U.S. Code § 2511 - Interception and disclosure of wire, oral, or electronic communications prohibited

Title 18 U.S. Code § 2701. Unlawful access to stored communications

Title 18 U.S. Code § 2510 et seq. - Definitions

Title 29 U.S. Code §§ 151 - 169, National Labor Relations