Discussion Post( 1-2 detailed paragraphs is required) DUE 05/15/2017 7am ET

There are an increasing number of industries that are exposed to information security and privacy regulations. Those industries (such as federal agencies, health care, finance, insurance and publicly traded companies) have developed some fairly standardized approaches to meeting those regulations. These regulations provide the security professional with a certain amount of “teeth” that can be used to motivate company executives to invest in proper resources in order to comply with those regulations. That is not the case in industries that are not exposed to a particular set of regulatory guidelines. Health care is one example where the investment in information security controls pre-HIPAA were often well below the investment in other industries that were regulated—despite the fact that health care collects and stores highly sensitive data. This example speaks to the challenge facing security professionals in unregulated industries to make the case for investment in security controls that do not necessarily contribute to the bottom-line profit margins.