Title: Explain laws and regulations applicable to cybersecurity in manufacturing systems.
Course: Cybersecurity in Manufacturing, Advanced (13002-IV) > Section: Applying Cybersecurity Standards and Regulations to Manufacturing Systems

Explanation may include, but not be limited to,

- federal laws, regulations, policies
  - Defense Federal Acquisition Regulation Supplement (DFARS)
  - Fact Sheet: EO 13636 Improving Critical Infrastructure Cybersecurity and Presidential Policy Directive (PPD) 21 Critical Infrastructure Security and Resilience
  - Privacy Act of 1974
  - Electronic Communications Privacy Act of 1986 (ECPA)
  - Counterfeit Access Device and Computer Fraud and Abuse Act of 1984
  - Cyber Security Information Sharing Act of 2015
  - The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule
  - Telecommunications Act of 1996
- international laws and standards
  - General Data Protection Regulation (GDPR)
  - European Union (EU) directive on security of network and information systems (NIS Directive)
  - North American Electric Reliability Corporation (NERC) Standards.

Process/Skill Questions:

- How do older regulations affect the current state of cybersecurity?
- Why is EO 13636 important to the manufacturing industry?
- What effect has HIPAA had on product security in the manufacturing of medical devices?