Streamline Information Security Regulations: Many private sector corporations are subject to more than one regulator for the protection of their data. For example, Sarbanes-Oxley requires companies to certify that their financial systems are appropriately controlled; HIPAA requires control of any personal information regarding health care, similar to the requirement that the Gramm-Leach-Bliley (GLB) Act puts on personal financial information. Congress could require the Administration to coordinate with critical infrastructure sectors to develop strong performance standards that, if a company was found compliant with the new standard, would satisfy the information security/privacy protections of SOX, HIPAA, GLB etc. A.
